VDB

GCVE-110-MAGEIA-2018-387

GCVE-110-MAGEIA-2018-387
Advisory Published
Vulnetix · Advisory published September 21, 2018
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (CVE-2018-16435)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageialcms20 (affected), 2.8-2.1.mga6 (unaffected)—

Aliases

CVE-2018-16435

References

Updated lcms2 packages fix security vulnerability
advisory
Updated lcms2 packages fix security vulnerability
issue
Updated lcms2 packages fix security vulnerability
advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›