Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2018-16435 →

DEBIAN-CVE-2018-16435

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buf...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 lcms2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3"}]}]

Debian:13 lcms2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3"}]}]

Debian:14 lcms2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-3"}]}]

Références

advisory security-tracker.debian.org