CVE-2026-41254

概要

参考情報

• abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow · Exploit
• mm2/Little-CMS commit da6110b · Patch
• mm2/Little-CMS commit e0641b1 · Patch
• mm2/Little-CMS security advisory · Broken Link
• openwall.com/lists/oss-security/2026/04/17/16 · Mailing List
• lists.debian.org/debian-lts-announce/2026/05/msg00014.html

little cms のその他の脆弱性

• CVE-2018-11556高 7.8tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafte…
• CVE-2018-11555高 7.8tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file. …
• CVE-2009-0733緊急 9.3Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefo…
• CVE-2009-0723緊急 9.3Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context…
• CVE-2009-0581中 4.3Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent att…