CVE-2025-29070

Name of the Vulnerable Software and Affected Versions lcms2 version 2.16

Description A heap buffer overflow issue has been identified in the thesmooth2() function in cmsgamma.c that allows a remote attacker to cause a denial of service. This issue affects the lcms2 library, potentially allowing for disruption of service.

Recommendations For lcms2 version 2.16, as a temporary workaround, consider disabling the thesmooth2() function until a patch is available. Restrict access to the cmsgamma.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.