Search for packages
Package details: pkg:deb/debian/lcms2@2.8-4%2Bdeb9u1
purl pkg:deb/debian/lcms2@2.8-4%2Bdeb9u1
Next non-vulnerable version 2.9-3
Latest non-vulnerable version 2.9-3
Risk 2.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-qkv7-ygu7-47a3
Aliases:
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
2.9-3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cj72-r1tx-4fd9 CVE-2016-10165
VCID-qkv7-ygu7-47a3 Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. CVE-2018-16435

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T16:39:43.372688+00:00 Debian Oval Importer Fixing VCID-cj72-r1tx-4fd9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:36:50.221834+00:00 Debian Oval Importer Affected by VCID-qkv7-ygu7-47a3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T10:38:44.012633+00:00 Debian Oval Importer Fixing VCID-qkv7-ygu7-47a3 https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 37.0.0