Описание
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure or a denial of service (DoS), which makes the system unavailable to legitimate users.
Отчет
This Moderate flaw in Little CMS (lcms2) involves an integer overflow within the CubeSize function, occurring due to an insufficient check during multiplication. Processing specially crafted color profiles or image data could lead to information disclosure or a denial of service, affecting the availability of applications that rely on lcms2 for color management. Exploitation requires user interaction with malicious content.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat build of OpenJDK 11 ELS | java-17-openjdk | Fix deferred | ||
| Red Hat build of OpenJDK 11 ELS | java-21-openjdk | Fix deferred | ||
| Red Hat build of OpenJDK 11 ELS | java-21-openjdk-vanilla | Fix deferred | ||
| Red Hat build of OpenJDK 11 ELS | java-25-openjdk-portable | Fix deferred | ||
| Red Hat build of OpenJDK 17 | java-17-openjdk | Fix deferred | ||
| Red Hat build of OpenJDK 17 | java-21-openjdk | Fix deferred | ||
| Red Hat build of OpenJDK 17 | java-21-openjdk-vanilla | Fix deferred | ||
| Red Hat build of OpenJDK 17 | java-25-openjdk-portable | Fix deferred | ||
| Red Hat build of OpenJDK 1.8 | java-17-openjdk | Fix deferred | ||
| Red Hat build of OpenJDK 1.8 | java-21-openjdk | Fix deferred |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in ...
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
EPSS
6.1 Medium
CVSS3