CVE-2018-16435
Published Sep 4, 2018Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData f…
Vendor/product archive
littlecms / little_cms_color_engine CVEs
Beta · best-effort7 CVEs tagged to littlecms / little_cms_color_engine — 3 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2016-10165
Published Feb 3, 2017The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted…
CVE-2013-7455
Published May 7, 2016Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malforme…
CVE-2013-4160
Published Jan 21, 2014Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vect…
CVE-2013-4276
Published Sep 28, 2013Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color p…
CVE-2008-5317
Published Dec 3, 2008Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file co…
CVE-2008-5316
Published Dec 3, 2008Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors relate…
Showing 1-7 of 7 CVEsPage 1 of 1