[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJUynM5VTdP11ykgXQ7SdrgGe2ao9NlikJl1wuDRDhbw":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":93,"topProductsByCves":94,"seoMetadata":98,"meta":107},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":33},18053,"littlecms",3,14,0,61,"2018-09-04","l",[16,21,27],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},104371,"little_cms_color_engine",23,7,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},104370,"little_cms",28,5,"2018-05-30",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},104369,"lcms",10,4,"2009-04-09","Littlecms is a technology vendor with 3 tracked products and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[35,44,51,56,60,66,71,76,81,89],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":42,"epssScore":43},"CVE-2007-2741","Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC profile in a JPG file.","2007-05-17",9.3,"v2","Critical",false,0.07928,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":49,"severity":41,"isKev":42,"epssScore":50},"CVE-2013-7455","Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.","2016-05-07",9.8,"v3.0",0.0623,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":42,"epssScore":55},"CVE-2009-0733","Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.","2009-03-23",0.05534,{"cveId":57,"description":58,"publishedDate":54,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":42,"epssScore":59},"CVE-2009-0723","Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.",0.05027,{"cveId":61,"description":62,"publishedDate":32,"cvssScore":63,"cvssVersion":40,"severity":64,"isKev":42,"epssScore":65},"CVE-2009-0793","cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for \"transformations of monochrome profiles.\"",4.3,"Medium",0.04834,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":63,"cvssVersion":40,"severity":64,"isKev":42,"epssScore":70},"CVE-2013-4276","Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.","2013-09-28",0.0404,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":25,"cvssVersion":40,"severity":64,"isKev":42,"epssScore":75},"CVE-2013-4160","Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSequenceDescription, (4) CurvesAlloc, and (5) cmsnamed.","2014-01-21",0.02809,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":30,"cvssVersion":40,"severity":41,"isKev":42,"epssScore":80},"CVE-2008-5316","Buffer overflow in the ReadEmbeddedTextTag function in src\u002Fcmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of \"the input file,\" a different vulnerability than CVE-2007-2741.","2008-12-03",0.02779,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":86,"severity":87,"isKev":42,"epssScore":88},"CVE-2016-10165","The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.","2017-02-03",7.1,"v3.1","High",0.02762,{"cveId":90,"description":91,"publishedDate":54,"cvssScore":63,"cvssVersion":40,"severity":64,"isKev":42,"epssScore":92},"CVE-2009-0581","Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.",0.02502,[],[95,96,97],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"title":99,"metaDescription":100,"keywords":101,"structuredData":102},"Littlecms - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Littlecms covering 3 products with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Littlecms vulnerabilities, Littlecms security, Littlecms CVE, Littlecms threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":103,"@type":104,"name":105,"description":100,"url":106},"https:\u002F\u002Fschema.org","Organization","Littlecms","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flittlecms",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":108,"apiVersion":109},"2026-10-17T20:28:29.961Z","3.0"]