Vulnerabilidades de Littlecms
CVEs publicadas que afetam produtos de Littlecms: 3 registro(s), com severidade, exploração e correções.
CVE-2026-42798
Média · 4.0
CWE-190 30/04/2026
Integer Overflow or Wraparound em Littlecms Little Cms Color Engine
Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
CVE-2026-41254
Alta · 7.5
CWE-190 18/04/2026
Integer Overflow or Wraparound em Littlecms Little Cms
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
CVE-2016-10165
Alta · 7.1
CWE-125 03/02/2017
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.