CVE-2018-16435

PoC —

CVSS 3.0

5.5 medium

EPSS

2%p76

Published

Sep 4, 2018 (Sep 4, 2018)

Modified

Jun 17, 2026

Description

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

Vendors: littlecms canonical redhat debian
Products: little cms color engine, ubuntu linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation, debian linux
Weakness: CWE-190, CWE-787
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.