OSV-2022-638 Use-of-uninitialized-value in ComputeConversion

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49495 Crash type: Use-of-uninitialized-value Crash state: ComputeConversion DefaultICCintents cmsLinkProfiles...

PT-2022-37134

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as ComputeConversion, DefaultICCintents, and...

Double free

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler...

CVE-2013-7455

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler...

CVE-2013-7455

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler...

CVE-2013-7455

CVE-2013-7455 is a double-free vulnerability in Little CMS (liblcms2) affecting Little CMS 2.x up to 2.5/2.6 in the DefaultICCintents function. A specially crafted ICC profile can trigger an error in the default intent handler, allowing remote attackers to execute arbitrary code or crash the host...

CVE-2013-7455: Undefined Security Weakness

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler...

Little CMS Memory Misreference Vulnerability

Little CMS aka lcms or liblcms is an open source color management system developed by software developer Marti Maria. The system provides black point compensation, multiple pixel format processing, profile editing and other features. A memory misreference vulnerability exists in the...

CVE-2013-7455

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler...

Little CMS 2 DefaultICCintents double-free vulnerability

Overview Little CMS 2 contains a double-free vulnerability in the DefaultICCintents function, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Little CMS is an open-source color management engine that supports the International Color...

PT-2016-3480

Name of the Vulnerable Software and Affected Versions Little CMS versions prior to 2.6 Description A double free vulnerability exists in the DefaultICCintents function in cmscnvrt.c in liblcms2. This issue can be triggered by a malformed ICC profile, allowing remote attackers to execute arbitrary...