Package · Debian

lcms2

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

Medium 4.0

CVE-2026-42798

Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.

littlecms little cms color engine lcms2 lcms2 Debian Ubuntu

Apr 30, 2026
Medium 4.0

CVE-2026-41254

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed…

littlecms little cms color engine openjdk11 openjdk-17 Debian Ubuntu Alpine

Apr 18, 2026
High 7.5

CVE-2025-29070

A heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2.16 which allows a rem…

lcms2 Debian

Apr 1, 2025
Unscored —

CVE-2018-16435

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats…

chromium-browser oxide-qt openjdk8 lcms2 Debian Ubuntu Alpine

Sep 4, 2018
Unscored —

CVE-2016-10165

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive informat…

openjdk-7 lcms2 lcms2 lcms2 Debian Ubuntu Alpine

Feb 3, 2017
Unscored —

CVE-2013-7455

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allo…

lcms2 lcms2 Debian Ubuntu

May 7, 2016
Unscored —

CVE-2014-0459

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect av…

openjdk-7 lcms2 lcms2 Debian Ubuntu

Apr 16, 2014
Unscored —

CVE-2013-4160

Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a den…

lcms2 Debian

Jan 21, 2014