CVE-2026-42798
Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
- Update to 2.16-2ubuntu0.2
Published Updated
PatchFirst · Latest vulnerabilities
lcms2 vulnerabilities
Vulnerabilities published for lcms2 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2026-41254
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
- Update to 2.16-2ubuntu0.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.