CVE-2026-41254
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
- Update to 2.14-2ubuntu0.1
Published Updated
PatchFirst · Latest vulnerabilities
lcms2 vulnerabilities
Vulnerabilities published for lcms2 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Check your server
Check your installed stack and versions against the current vulnerability feeds.