| Package | Affected versions | Patched versions |
|---|---|---|
| lcms | = 1.07= 1.08= 1.09= 1.10= 1.11= 1.12= 1.13= 1.14= 1.15≤ 1.16 | |
| little cms color engine | = 1.07= 1.08= 1.09= 1.10= 1.11= 1.12= 1.13= 1.14= 1.15≤ 1.16 |
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free