Vulnerabilities > Littlecms > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-09-04 CVE-2018-16435 Integer Overflow or Wraparound vulnerability in multiple products
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
local
low complexity
littlecms canonical redhat debian CWE-190
5.5