Search for packages
Package details: pkg:deb/debian/lcms2@2.9-3
purl pkg:deb/debian/lcms2@2.9-3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-tst4-dhas-aaap Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. CVE-2018-16435

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T11:47:31.892680+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T00:01:58.580199+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap None 36.1.3
2025-06-08T11:55:37.459050+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T05:02:13.004572+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T17:24:46.051491+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap None 36.1.0
2025-04-12T17:40:46.657117+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T03:33:07.314478+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T15:58:59.343897+00:00 Debian Oval Importer Fixing VCID-tst4-dhas-aaap None 36.0.0