rpm package
suse/lcms2&distro=SUSE Linux Micro 6.1
pkg:rpm/suse/lcms2&distro=SUSE%20Linux%20Micro%206.1
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-42798 | Med | 4.0 | < 2.16-slfo.1.1_2.1 | 2.16-slfo.1.1_2.1 | Apr 30, 2026 | Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c. | |
| CVE-2026-41254 | Med | 4.0 | < 2.16-slfo.1.1_2.1 | 2.16-slfo.1.1_2.1 | Apr 18, 2026 | Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication. |
- affected < 2.16-slfo.1.1_2.1fixed 2.16-slfo.1.1_2.1
Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.
- affected < 2.16-slfo.1.1_2.1fixed 2.16-slfo.1.1_2.1
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.