CVE-2026-41254
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
- Update to 2.5-0ubuntu4.2+esm1
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for lcms2 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
Check your installed stack and versions against the current vulnerability feeds.