CVE-2013-7455

Fixed in a distro release EPSS 6%

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.

Published 2016-05-07 · CVE record · OSV

Products: littlecms little_cms_color_engine

Distro releases