Vulnerabilities in littlecms

2 results
CVE-2026-41254MEDIUMLittle CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplicaEPSS 0.4%CVE-2026-42798MEDIUMLittle CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.EPSS 0.1%