Search for packages
Package details: pkg:deb/debian/lcms2@2.6-3
purl pkg:deb/debian/lcms2@2.6-3
Next non-vulnerable version 2.9-3
Latest non-vulnerable version 2.9-3
Risk 3.2
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-cj72-r1tx-4fd9
Aliases:
CVE-2016-10165
2.6-3+deb8u1
Affected by 2 other vulnerabilities.
2.8-4+deb9u1
Affected by 1 other vulnerability.
VCID-qkv7-ygu7-47a3
Aliases:
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
2.8-4+deb9u1
Affected by 1 other vulnerability.
2.9-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-13tb-t69z-nqbr CVE-2013-7455
VCID-p9v3-eg55-zuhb CVE-2013-4160
VCID-qwza-emp3-cucv CVE-2014-0459

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T17:34:31.716340+00:00 Debian Oval Importer Fixing VCID-13tb-t69z-nqbr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:39:43.363537+00:00 Debian Oval Importer Affected by VCID-cj72-r1tx-4fd9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T14:14:14.261708+00:00 Debian Oval Importer Fixing VCID-qwza-emp3-cucv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:36:50.211618+00:00 Debian Oval Importer Affected by VCID-qkv7-ygu7-47a3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:09:14.812805+00:00 Debian Oval Importer Fixing VCID-p9v3-eg55-zuhb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T10:38:44.001324+00:00 Debian Oval Importer Affected by VCID-qkv7-ygu7-47a3 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:03:48.156742+00:00 Debian Oval Importer Affected by VCID-cj72-r1tx-4fd9 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0