CVE-2018-16435

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Score
CVSS 3.0 5.5 Medium
Status
Modified - cve@mitre.org
Published
2018-09-04
Last modified
2024-08-05
Weaknesses
CWE-190, CWE-787

Affected products

References

 
 
© AVABIS GmbH privacypolicy about