[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6eBJilochvEFwkA_P1MWrO_dGiI-FuUviVKktyZonzM":3,"g5a-risk:CVE-2018-11555":109},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":15,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":50,"references":51,"referencesCount":60,"weaknesses":61,"weaknessesCount":50,"isActivelyExploited":70,"cisaInfo":15,"otxData":15,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":105,"notableEvents":106},"CVE-2018-11555","What is CVE-2018-11555?","tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS developers do consider this a vulnerability because the issue is based on an sample program using LIBTIFF and do not apply to the lcms2 library, lcms2 does not depends on LIBTIFF other than to build sample programs, and the issue cannot be reproduced on the lcms2 library.”","tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS ...","2018-05-30T04:29:00.393","2024-08-05T08:15:47.38",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",1.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":36,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":36,"Authentication":24,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NETWORK","MEDIUM","PARTIAL",6.8,8.6,6.4,0.0105,[41,41,41,41,41,41,41],"High",[45],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"littlecms","little_cms","2.9","cpe:2.3:a:littlecms:little_cms:2.9:*:*:*:*:*:*:*",1,[52,57],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fgithub.com\u002Fmm2\u002FLittle-CMS\u002Fissues\u002F167","GitHub",[56],"Third Party Advisory",{"url":58,"source":54,"tags":59},"https:\u002F\u002Fgithub.com\u002Fxiaoqx\u002Fpocs\u002Ftree\u002Fmaster\u002Fcms",[56],2,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2018-11555? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-11555, a high severity cyber security vulnerability from 2018. tificc in Little CMS 2.9 has an out-of-bounds write in the ...","CVE-2018-11555, CVE-2018-11555 vulnerability, CVE-2018-11555 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, littlecms security, little_cms vulnerability","\u002Fwhat-is\u002Fcve-2018-11555",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-11555","Cybersecurity","CVE-2018-11555, CVE-2018-11555 vulnerability, CVE-2018-11555 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":15,"Negate":15,"Nodes":99},[100],{"Operator":101,"Negate":15,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":104,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"958BF01F-F0CB-40AA-84B8-B7AD4922BE40",[],[],{"lastModified":11,"cacheTime":108,"version":33},1792269268719,{"score":110,"band":111,"action":112,"scoredAt":113},46,"Medium","Plan remediation","2026-10-16T06:44:08.476897+00:00"]