{"id":"CVE-2026-42798","aliases":["BELL-CVE-2026-42798","DEBIAN-CVE-2026-42798","EUVD-2026-26351","GHSA-4m94-357r-hwph","OESA-2026-2325","OESA-2026-2326","OESA-2026-2327","SUSE-SU-2026:22070-1","SUSE-SU-2026:22506-1","SUSE-SU-2026:23443-1","UBUNTU-CVE-2026-42798","USN-8250-1","openSUSE-SU-2026:21202-1"],"status":"published","title":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00128,"percentile":0.02518,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-04-30T06:34:13Z","modified":"2026-10-28T11:13:31Z","fixes":[{"ecosystem":"Alpaquita:25","package":"lcms2","fixed_in":["2.19-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"lcms2","fixed_in":["2.19-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lcms2","fixed_in":["2.16-2+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lcms2","fixed_in":["2.19.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"lcms2","fixed_in":["2.16-3.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"lcms2","fixed_in":["2.16-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"lcms2","fixed_in":["2.16-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"lcms2","fixed_in":["2.16-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"lcms2","fixed_in":["2.17-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:25","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.16-r0"},{"fixed":"2.19-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.16-r0"},{"fixed":"2.19-r0"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-2+deb13u2"}]}],"versions":["2.16-2","2.16-2+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1-1"}]}],"versions":["2.16-2","2.17-1","2.17-1.1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-3.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-2ubuntu0.2"}]}],"versions":["2.16-2","2.16-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-1ubuntu0.2"}]}],"versions":["2.16-2","2.17-1","2.17-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-2ubuntu0.2"}]}],"versions":["2.16-2","2.16-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17-1ubuntu0.2"}]}],"versions":["2.16-2","2.17-1","2.17-1ubuntu0.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"lcms2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16-160000.4.1"}]}],"bundled":2}],"products":[{"vendor":"littlecms","product":"little cms color engine"}],"references":[{"url":"https://github.com/mm2/Little-CMS/commit/6a686019825a89b715d16671f18d049523354176","tags":["fix"]},{"url":"https://github.com/mm2/Little-CMS/compare/lcms2.18...lcms2.19","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/30/8","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42798","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4m94-357r-hwph"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-42798","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42798.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-42798","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2325","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2326","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2327","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622070-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263703","tags":["report"]},{"url":"https://bugzilla.suse.com/1264994","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42798","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622506-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623443-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1247985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-42798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42798","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8250-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-42798","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","status":"published","published":"2026-04-30T06:34:13.323Z","modified":"2026-04-30T12:57:14.221Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T13:40:23.731501Z"}],"euvd":[{"id":"EUVD-2026-26351","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","status":"published","published":"2026-04-30T06:34:13Z","modified":"2026-04-30T12:57:14Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:05:19.116327Z"}],"ghsa":[{"id":"GHSA-4m94-357r-hwph","title":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","status":"published","published":"2026-04-30T09:30:24Z","modified":"2026-04-30T09:30:31Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:07:52.236911Z"}],"nvd":[{"id":"CVE-2026-42798","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","status":"published","published":"2026-04-30T07:16:37.423Z","modified":"2026-10-26T22:10:00.163Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:16.626888Z"}],"osv":[{"id":"BELL-CVE-2026-42798","status":"published","published":"2026-05-06T06:11:06.57403Z","modified":"2026-05-08T07:16:45.274674Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:23.844435Z"},{"id":"CVE-2026-42798","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","status":"published","published":"2026-04-30T06:34:13.323Z","modified":"2026-10-28T11:13:31.038112711Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:45:04.117819Z"},{"id":"DEBIAN-CVE-2026-42798","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","status":"published","published":"2026-04-30T07:16:37.423Z","modified":"2026-10-27T09:47:28.517207079Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:55.251751Z"},{"id":"OESA-2026-2325","title":"lcms2 security update","description":"LittleCMS intends to be an OPEN SOURSE small-footprint color management engine,with special focus on accuracy and performence.It uses the International Color Consortium standard (ICC), which is the modern standard when regarding to color management. The ICC specification is widely used and is referred to in many International and other de-facto standards.\r\n\r\nSecurity Fix(es):\n\nLittle CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.(CVE-2026-42798)","status":"published","published":"2026-05-15T11:11:17Z","modified":"2026-08-18T01:19:57.862937093Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2326","title":"lcms2 security update","description":"LittleCMS intends to be an OPEN SOURSE small-footprint color management engine,with special focus on accuracy and performence.It uses the International Color Consortium standard (ICC), which is the modern standard when regarding to color management. The ICC specification is widely used and is referred to in many International and other de-facto standards.\r\n\r\nSecurity Fix(es):\n\nLittle CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.(CVE-2026-42798)","status":"published","published":"2026-05-15T11:11:17Z","modified":"2026-08-18T01:19:57.914871376Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"OESA-2026-2327","title":"lcms2 security update","description":"LittleCMS intends to be an OPEN SOURSE small-footprint color management engine,with special focus on accuracy and performence.It uses the International Color Consortium standard (ICC), which is the modern standard when regarding to color management. The ICC specification is widely used and is referred to in many International and other de-facto standards.\r\n\r\nSecurity Fix(es):\n\nLittle CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.(CVE-2026-42798)","status":"published","published":"2026-05-15T11:11:17Z","modified":"2026-08-18T01:19:57.490178318Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.449097Z"},{"id":"UBUNTU-CVE-2026-42798","description":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","status":"published","published":"2026-05-05T00:00:00Z","modified":"2026-05-20T16:25:43.385020029Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"openSUSE-SU-2026:21202-1","title":"Security update for lcms2","description":"This update for lcms2 fixes the following issues\n\n- CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994).\n- CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).\n","status":"published","published":"2026-07-01T12:17:04Z","modified":"2026-07-03T18:24:23.914741903Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22070-1","title":"Security update for lcms2","description":"This update for lcms2 fixes the following issues\n\n- CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994).\n- CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).\n","status":"published","published":"2026-06-05T14:41:43Z","modified":"2026-06-13T18:24:16.691210141Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22506-1","title":"Security update for lcms2","description":"This update for lcms2 fixes the following issues\n\n- CVE-2026-41254: integer overflow in CubeSize in cmslut.c (bsc#1264994).\n- CVE-2026-42798: integer overflow in ParseCube in cmscgats.c (bsc#1263703).\n","status":"published","published":"2026-07-01T12:16:02Z","modified":"2026-07-07T18:24:06.613440414Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:23443-1","title":"Security update for lcms2","description":"This update for lcms2 fixes the following issues:\n\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-42798: Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c\n  (bsc#1263703).\n\nChanges for lcms2:\n\n- Enable threads support (bsc#1247985)\n","status":"published","published":"2026-09-01T12:45:17Z","modified":"2026-09-14T18:23:11.106154798Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"USN-8250-1","title":"lcms2 vulnerability","description":"It was discovered that Little CMS incorrectly handled certain malformed ICC\nprofiles. An attacker could possibly use this issue to cause Little CMS to\ncrash, resulting in a denial of service.","status":"published","published":"2026-05-07T13:27:43Z","modified":"2026-05-20T16:04:05.015844668Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}