Vulnerabilities > Littlecms > Lcms > 1.15

DATE CVE VULNERABILITY TITLE RISK
2008-12-03 CVE-2008-5317 Numeric Errors vulnerability in Littlecms Lcms and Little CMS Color Engine
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.
network
low complexity
littlecms CWE-189
critical
10.0