CVE-2026-41254

High

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the…

mitre·CWE-696·Published 2026-04-18

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

145 chars

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

NVDen

145 chars

Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.

Little CMS (lcms2) hasta la versión 2.18 tiene un desbordamiento de entero en CubeSize en cmslut.c porque la comprobación de desbordamiento se realiza después de la multiplicación.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	4.0	—	—	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
3.1	Secondary	NVD	4.0	1.4	2.5	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L