CVE-2018-16435

MEDIUM

Littlecms Little Cms Color Engine - Integer Overflow

Title source: rule
STIX 2.1

Description

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

References (8)

Core 8
Core References
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3770-2/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3770-1/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:3004
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/09/msg00005.html
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://github.com/mm2/Little-CMS/issues/171
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4284
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202105-18

Scores

CVSS v3 5.5
EPSS 0.0045
EPSS Percentile 63.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-190 CWE-787
Status published
Products (10)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
debian/debian_linux 8.0
debian/debian_linux 9.0
littlecms/little_cms_color_engine 2.9
redhat/enterprise_linux_desktop 6.0
redhat/enterprise_linux_server 6.0
redhat/enterprise_linux_workstation 6.0
Published Sep 04, 2018
Tracked Since Feb 18, 2026