rpm package

opensuse/lcms2&distro=openSUSE Leap 16.0

pkg:rpm/opensuse/lcms2&distro=openSUSE%20Leap%2016.0

Vulnerabilities (2)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2026-42798	Med	4.0		< 2.16-160000.4.1	2.16-160000.4.1	Apr 30, 2026	Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
CVE-2026-41254	Med	4.0		< 2.16-160000.4.1	2.16-160000.4.1	Apr 18, 2026	Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

CVE-2026-42798MedApr 30, 2026
affected < 2.16-160000.4.1fixed 2.16-160000.4.1
Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
CVE-2026-41254MedApr 18, 2026
affected < 2.16-160000.4.1fixed 2.16-160000.4.1
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.