CVE-2016-10165

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Score
CVSS 3.1 7.1 High
Status
Modified - cve@mitre.org
Published
2017-02-03
Last modified
2026-10-15
Weaknesses
CWE-125

Affected products

References

 
 
© AVABIS GmbH privacypolicy about