DEBIAN-CVE-2016-10165

DEBIAN-CVE-2016-10165 PUBLISHED CVSS 7.099999904632568 HIGH

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Risk Scores

CVSS v3.1

7.099999904632568

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:11	lcms2	0, 0, 0
Debian:14	lcms2	0, 0, 0
Debian:13	lcms2	0, 0, 0
Debian:12	lcms2	0, 0, 0

Timeline

Feb 3, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-10165 advisory

Open in Interactive Console →