Littlecms vulnerabilities

Products

• Little Cms Color Engine 7
• Little Cms 6
• Lcms 4
• Little Cms Color Engine 2

Newest

• littlecms little cms color engine Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c. CVE-2026-42798 Fix available 4.0 MediumApril 30, 2026
• littlecms little cms, little cms color engine +1 more Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the... CVE-2026-41254 Fix available 4.0 MediumApril 18, 2026
• canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 more Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the... CVE-2018-16435 Fix available 5.5 MediumSeptember 3, 2018
• littlecms little cms ** DISPUTED ** tificc in Little CMS 2.9 has an out-of-bounds write in the... CVE-2018-11556 Disputed 7.8 HighMay 30, 2018
• littlecms little cms ** DISPUTED ** tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM... CVE-2018-11555 Disputed 7.8 HighMay 30, 2018
• canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 more The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to... CVE-2016-10165 Fix available 7.1 HighJanuary 26, 2017
• littlecms little cms color engine Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little... CVE-2013-7455 Fix available 9.8 CriticalMay 4, 2016
• littlecms little cms color engine Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow... CVE-2013-4276 Fix available 4.3 MediumAugust 26, 2013
• littlecms little cms color engine Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote... CVE-2013-4160 Fix available 5.0 MediumAugust 9, 2013
• littlecms lcms, sun openjdk +1 more cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows... CVE-2009-0793 4.3 MediumApril 9, 2009
• gimp, mozilla firefox, sun openjdk +1 more +3 more Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or... CVE-2009-0733 9.3 HighMarch 20, 2009
• gimp, mozilla firefox, sun openjdk +1 more +3 more Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in... CVE-2009-0723 9.3 HighMarch 20, 2009
• gimp, mozilla firefox, oracle openjdk +1 more +3 more Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta,... CVE-2009-0581 4.3 MediumMarch 20, 2009
• littlecms lcms, little cms color engine +1 more Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color... CVE-2008-5317 10.0 HighDecember 3, 2008
• littlecms lcms, little cms color engine +1 more Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine ... CVE-2008-5316 10.0 HighDecember 3, 2008
• littlecms lcms Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute... CVE-2007-2741 9.3 HighMay 17, 2007