Every CVE Search/ Get API key

CVE-2018-16435

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the...

5.5 MediumFix available

CVE-2018-16435 is a medium vulnerability (CVSS 5.5) in Canonical Ubuntu Linux, published September 3, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. Fixed in lcms2 2.9-r1.

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.74%Up 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
CVE-2018-16435
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-190, CWE-787
Updated
2026-11-02
CVE List No score

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
CVE-2018-16435
Updated
2026-11-02
EUVDEUVD-2018-8275 No score

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
EUVD-2018-8275
Updated
2026-11-03
GitHub AdvisoriesGHSA-2w2q-grxm-gr8f 5.5

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the...

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
GHSA-2w2q-grxm-gr8f
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2018-16435 5.5

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
ALPINE-CVE-2018-16435
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-44076 5.5

CVE-2018-16435 affecting package openjpeg2 2.3.1-12

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
AZL-44076
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVBELL-CVE-2018-16435 5.5

CVE-2018-16435 does not affect BellSoft software

Record
BELL-CVE-2018-16435
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
CVE-2018-16435
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-16435 5.5

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
DEBIAN-CVE-2018-16435
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2026-490 5.5

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
JLSEC-2026-490
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVRHSA-2018:3004 8.8

Red Hat Security Advisory: chromium-browser security update

Record
RHSA-2018:3004
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-16435 5.5

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Record
UBUNTU-CVE-2018-16435
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2018-0387 No score

Updated lcms2 packages fix security vulnerability

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (CVE-2018-16435)

Record
MGASA-2018-0387
Updated
2026-11-02
OSVopenSUSE-SU-2019:0043-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:

Security issues fixed:

  • CVE-2018-3136: Manifest better support (bsc#1112142)
  • CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
  • CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
  • CVE-2018-3169: Improve field accesses (bsc#1112146)
  • CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
  • CVE-2018-3214: Better RIFF reading support (bsc#1112152)
  • CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
  • CVE-2018-3183: Improve script engine support (bsc#1112148)
  • CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:0043-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10876-1 No score

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10876-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10910-1 No score

lcms2-2.12-1.3 on GA media

These are all security issues fixed in the lcms2-2.12-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10910-1
Updated
2026-11-02
OSVSUSE-SU-2018:3498-1 No score

Security update for lcms2

This update for lcms2 fixes the following issues:

  • CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (bsc#1108813)
Record
SUSE-SU-2018:3498-1
Updated
2026-11-02
OSVSUSE-SU-2018:3545-1 No score

Security update for lcms2

This update for lcms2 fixes the following security issues:

  • CVE-2016-10165: The Type_MLU_Read function allowed remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggered an out-of-bounds heap read (bsc#1021364).
  • CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (bsc#1108813)
  • Ensure that LUT stages match channel count (bsc#1026649).
  • sanitize input and output channels on MPE profiles (bsc#1026650).
Record
SUSE-SU-2018:3545-1
Updated
2026-11-02
OSVSUSE-SU-2019:0049-1 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:

Security issues fixed:

  • CVE-2018-3136: Manifest better support (bsc#1112142)
  • CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
  • CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
  • CVE-2018-3169: Improve field accesses (bsc#1112146)
  • CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
  • CVE-2018-3214: Better RIFF reading support (bsc#1112152)
  • CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
  • CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
  • CVE-2018-2938: Support Derby connections (bsc#1101644)
  • CVE-2018-2940: Better stack walking (bsc#1101645)
  • CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)
  • CVE-2018-2973: Improve LDAP support (bsc#1101656)
  • CVE-2018-3639 cpu speculative store bypass mitigation
Record
SUSE-SU-2019:0049-1
Updated
2026-11-02
OSVSUSE-SU-2019:0049-2 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk to version 7u201 fixes the following issues:

Security issues fixed:

  • CVE-2018-3136: Manifest better support (bsc#1112142)
  • CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
  • CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
  • CVE-2018-3169: Improve field accesses (bsc#1112146)
  • CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
  • CVE-2018-3214: Better RIFF reading support (bsc#1112152)
  • CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
  • CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
  • CVE-2018-2938: Support Derby connections (bsc#1101644)
  • CVE-2018-2940: Better stack walking (bsc#1101645)
  • CVE-2018-2952: Exception to Pattern Syntax (bsc#1101651)
  • CVE-2018-2973: Improve LDAP support (bsc#1101656)
  • CVE-2018-3639 cpu speculative store bypass mitigation
Record
SUSE-SU-2019:0049-2
Updated
2026-11-02
OSVSUSE-SU-2019:0057-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:

Security issues fixed:

  • CVE-2018-3136: Manifest better support (bsc#1112142)
  • CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
  • CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
  • CVE-2018-3169: Improve field accesses (bsc#1112146)
  • CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
  • CVE-2018-3214: Better RIFF reading support (bsc#1112152)
  • CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
  • CVE-2018-3183: Improve script engine support (bsc#1112148)
  • CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
Record
SUSE-SU-2019:0057-1
Updated
2026-11-02
OSVSUSE-SU-2019:0057-2 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:

Security issues fixed:

  • CVE-2018-3136: Manifest better support (bsc#1112142)
  • CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
  • CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
  • CVE-2018-3169: Improve field accesses (bsc#1112146)
  • CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
  • CVE-2018-3214: Better RIFF reading support (bsc#1112152)
  • CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
  • CVE-2018-3183: Improve script engine support (bsc#1112148)
  • CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
Record
SUSE-SU-2019:0057-2
Updated
2026-11-02
OSVSUSE-SU-2019:0058-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:

Security issues fixed:

  • CVE-2018-3136: Manifest better support (bsc#1112142)
  • CVE-2018-3139: Better HTTP Redirection (bsc#1112143)
  • CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)
  • CVE-2018-3169: Improve field accesses (bsc#1112146)
  • CVE-2018-3180: Improve TLS connections stability (bsc#1112147)
  • CVE-2018-3214: Better RIFF reading support (bsc#1112152)
  • CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)
  • CVE-2018-3183: Improve script engine support (bsc#1112148)
  • CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile
Record
SUSE-SU-2019:0058-1
Updated
2026-11-02
OSVUSN-3770-1 No score

lcms2 vulnerabilities

Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-10165)

Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-16435)

Record
USN-3770-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lcms2
Alpine:v3.10
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.11
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.12
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.13
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.14
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.15
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.16
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.17
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.18
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.19
 before 2.9-r1
2.9-r1
Show 81 moreShow less
Affected packages
PackageAffectedFixed
lcms2
Alpine:v3.20
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.21
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.22
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.23
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.24
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.8
 before 2.9-r1
2.9-r1
lcms2
Alpine:v3.9
 before 2.9-r1
2.9-r1
openjdk8
Alpine:v3.10
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.11
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.12
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.13
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.14
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.15
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.16
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.17
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.18
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.19
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.20
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.21
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.22
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.23
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.24
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.5
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.6
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.7
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.8
 before 8.191.12-r0
8.191.12-r0
openjdk8
Alpine:v3.9
 before 8.191.12-r0
8.191.12-r0
openjpeg2
Azure Linux:3
 through 2.3.1-12 None known
lcms2
Debian:12
 before 2.9-3
2.9-3
lcms2
Debian:13
 before 2.9-3
2.9-3
lcms2
Debian:14
 before 2.9-3
2.9-3
lcms2
Debian:8
 before 2.6-3+deb8u2, plus listed versions
2.6-32.6-3+deb8u1
2.6-3+deb8u2
lcms2
Debian:9
 before 2.8-4+deb9u1, plus listed versions
2.8-4
2.8-4+deb9u1
chromium-browser
Debian:9
 before 69.0.3497.81-1~deb9u1, plus listed versions
59.0.3071.104-159.0.3071.86-160.0.3112.72-160.0.3112.78-160.0.3112.78-1~deb9u1
Show 45 moreShow less
61.0.3163.100-161.0.3163.100-1~deb9u161.0.3163.100-262.0.3202.75-162.0.3202.75-1~deb9u162.0.3202.89-162.0.3202.89-1~deb9u163.0.3239.30-163.0.3239.40-163.0.3239.84-163.0.3239.84-1~deb9u164.0.3282.119-164.0.3282.119-1~deb9u164.0.3282.119-265.0.3325.146-165.0.3325.146-265.0.3325.146-365.0.3325.146-465.0.3325.73-165.0.3325.74-166.0.3359.117-166.0.3359.117-1~deb9u166.0.3359.139-166.0.3359.181-166.0.3359.22-166.0.3359.22-266.0.3359.22-366.0.3359.26-166.0.3359.26-267.0.3396.48-167.0.3396.56-167.0.3396.57-167.0.3396.62-167.0.3396.62-267.0.3396.79-167.0.3396.79-267.0.3396.87-167.0.3396.87-1~deb9u168.0.3440.17-168.0.3440.25-168.0.3440.33-168.0.3440.42-168.0.3440.7-168.0.3440.75-168.0.3440.75-1~deb9u1
69.0.3497.81-1~deb9u1
LittleCMS_jll
Julia
 before 2.12.0+0
2.12.0+0
lcms2
Mageia:6
 before 2.8-2.1.mga6
2.8-2.1.mga6
chromium-browser
Red Hat:rhel_extras:6
 before 0:70.0.3538.67-1.el6_10
0:70.0.3538.67-1.el6_10
chromium-browser-debuginfo
Red Hat:rhel_extras:6
 before 0:70.0.3538.67-1.el6_10
0:70.0.3538.67-1.el6_10
lcms2
SUSE:Linux Enterprise Module for Basesystem 15
 before 2.9-3.3.1
2.9-3.3.1
lcms2
SUSE:Linux Enterprise Desktop 12 SP3
 before 2.7-9.7.1
2.7-9.7.1
lcms2
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 2.7-9.7.1
2.7-9.7.1
lcms2
SUSE:Linux Enterprise Server 12 SP3
 before 2.7-9.7.1
2.7-9.7.1
lcms2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 2.7-9.7.1
2.7-9.7.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud 7
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP3
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12-LTSS
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP3
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Enterprise Storage 4
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.7.0.201-43.18.1
1.7.0.201-43.18.1
java-1_8_0-openjdk
SUSE:OpenStack Cloud 7
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP3
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP3
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Enterprise Storage 4
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.8.0.191-27.29.1
1.8.0.191-27.29.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15
 before 1.8.0.191-3.13.1
1.8.0.191-3.13.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Package Hub 15
 before 1.8.0.191-3.13.1
1.8.0.191-3.13.1
lcms2
Ubuntu:14.04:LTS
 before 2.5-0ubuntu4.2, plus listed versions
2.5-0ubuntu12.5-0ubuntu22.5-0ubuntu32.5-0ubuntu42.5-0ubuntu4.1
2.5-0ubuntu4.2
chromium-browser
Ubuntu:16.04:LTS
 before 69.0.3497.81-0ubuntu0.16.04.1, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 34 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.1
69.0.3497.81-0ubuntu0.16.04.1
lcms2
Ubuntu:16.04:LTS
 before 2.6-3ubuntu2.1, plus listed versions
2.6-3ubuntu2
2.6-3ubuntu2.1
oxide-qt
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.9.5-0ubuntu11.10.3-0ubuntu0.15.10.11.10.3-0ubuntu0.15.10.21.11.3-0ubuntu31.11.4-0ubuntu1
Show 17 moreShow less
1.11.5-0ubuntu11.12.5-0ubuntu11.12.6-0ubuntu11.12.7-0ubuntu11.13.6-0ubuntu11.14.7-0ubuntu11.14.9-0ubuntu0.16.04.11.15.7-0ubuntu0.16.04.11.15.8-0ubuntu0.16.04.11.16.5-0ubuntu0.16.04.11.17.7-0ubuntu0.16.04.11.17.9-0ubuntu0.16.04.11.18.3-0ubuntu0.16.04.11.18.5-0ubuntu0.16.04.11.19.4-0ubuntu0.16.04.11.20.4-0ubuntu0.16.04.11.21.5-0ubuntu0.16.04.1
 None known
chromium-browser
Ubuntu:18.04:LTS
 before 69.0.3497.81-0ubuntu0.18.04.1, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 11 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.1
69.0.3497.81-0ubuntu0.18.04.1
lcms2
Ubuntu:18.04:LTS
 before 2.9-1ubuntu0.1, plus listed versions
2.7-1ubuntu12.8-42.9-1
2.9-1ubuntu0.1
java-1_8_0-openjdk
openSUSE:Leap 15.0
 before 1.8.0.191-lp150.2.9.2
1.8.0.191-lp150.2.9.2
java-1_8_0-openjdk
openSUSE:Tumbleweed
 before 1.8.0.302-2.2
1.8.0.302-2.2
lcms2
openSUSE:Tumbleweed
 before 2.12-1.3
2.12-1.3

History

History
WhenChangedSources
2026-11-03affectedOSV
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 2 versions and 89 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open