Unscored DSA-1684-1 2 CVEs

lcms - multiple vulnerabilities

Published Dec 10, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	lcms	1.15-1.1+etch1

Vulnerabilities 2

Unscored —

CVE-2008-5316

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 a…

Dec 3, 2008
Unscored —

CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1…

Dec 3, 2008