CVE-2013-4276

Fixed in a distro release EPSS 4%

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

Published 2013-09-28 · CVE record · OSV

Products: littlecms little_cms_color_engine

Distro releases