Search for packages
Package details: pkg:deb/ubuntu/lcms2@2.7-1ubuntu1
purl pkg:deb/ubuntu/lcms2@2.7-1ubuntu1
Next non-vulnerable version 2.9-1ubuntu0.1
Latest non-vulnerable version 2.9-1ubuntu0.1
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-7g8v-91fw-aaan
Aliases:
CVE-2016-10165
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
2.8-4
Affected by 1 other vulnerability.
VCID-tst4-dhas-aaap
Aliases:
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
2.9-1ubuntu0.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version