LI
Vendor
Littlecms
19
CVEs
0
On KEV
0
New 30D
Products
LC9.8
little cms color engine
littlecms
9 CVEs0 on KEV0 new
LC7.8
Little Cms
Littlecms
6 CVEs0 on KEV0 new
LC–
Lcms
Littlecms
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-42798 | LC little cms color engine littlecms | 4.0 | Apr 30 | Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c |
| CVE-2026-41254 | LC little cms color engine littlecms | 7.5 | Apr 18 | Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication |
| CVE-2018-16435 | LC Little Cms Color Engine Littlecms | 5.5 | Sep 4 | Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData… |
| CVE-2018-11556 | LC Little Cms Littlecms | 7.8 | May 30 | tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafted TIFF file |
| CVE-2018-11555 | LC Little Cms Littlecms | 7.8 | May 30 | tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file |
| CVE-2016-10165 | LC Little Cms Color Engine Littlecms | 7.1 | Feb 3 | The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted… |
| CVE-2013-7455 | LC Little Cms Color Engine Littlecms | 9.8 | May 7 | Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a… |
| CVE-2013-4160 | LC Little Cms Color Engine Littlecms | – | Jan 21 | Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via… |
| CVE-2013-4276 | LC Little Cms Color Engine Littlecms | – | Sep 28 | Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color… |
| CVE-2009-0793 | LC Lcms Littlecms | – | Apr 9 | cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and… |
| CVE-2009-0733 | LC Little Cms Littlecms | – | Mar 23 | Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow… |
| CVE-2009-0723 | LC Little Cms Littlecms | – | Mar 23 | Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute… |
| CVE-2009-0581 | LC Little Cms Littlecms | – | Mar 23 | Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service… |
| CVE-2008-5317 | LC Lcms Littlecms | – | Dec 3 | Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file… |
| CVE-2008-5316 | LC Lcms Littlecms | – | Dec 3 | Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors… |
| CVE-2007-2741 | LC Lcms Littlecms | – | May 17 | Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC… |