Search for packages
Package details: pkg:deb/debian/lcms2@2.6-3%2Bdeb8u1
purl pkg:deb/debian/lcms2@2.6-3%2Bdeb8u1
Next non-vulnerable version 2.9-3
Latest non-vulnerable version 2.9-3
Risk 3.2
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-cj72-r1tx-4fd9
Aliases:
CVE-2016-10165
2.8-4+deb9u1
Affected by 1 other vulnerability.
VCID-qkv7-ygu7-47a3
Aliases:
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
2.8-4+deb9u1
Affected by 1 other vulnerability.
2.9-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-cj72-r1tx-4fd9 CVE-2016-10165

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T16:39:43.368054+00:00 Debian Oval Importer Affected by VCID-cj72-r1tx-4fd9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:36:50.216326+00:00 Debian Oval Importer Affected by VCID-qkv7-ygu7-47a3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T10:38:44.006460+00:00 Debian Oval Importer Affected by VCID-qkv7-ygu7-47a3 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0
2025-08-01T10:03:48.162387+00:00 Debian Oval Importer Fixing VCID-cj72-r1tx-4fd9 https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 37.0.0