CVE-2018-16435

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer…

published September 4, 2018

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01740 · 77.5th percentile
Published
2018-09-04T00:00Z
EPSS history
Timeline
  • 04 SEP 00:00Z
    Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer…
    cvelistv5