CVE Intelligence

Littlecms vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Littlecms products: 3 record(s), with severity, exploitation and fixes.

Little Cms Color Engine 3Little Cms 1

Exploited only (KEV) →

CVE-2026-42798 Medium · 4.0 CWE-190 Apr 30, 2026
Integer Overflow or Wraparound in Littlecms Little Cms Color Engine
Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
CVE-2026-41254 High · 7.5 CWE-190 Apr 18, 2026
Integer Overflow or Wraparound in Littlecms Little Cms
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
CVE-2016-10165 High · 7.1 CWE-125 Feb 3, 2017
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.