PT-2026-33596 · Unknown+5 · Little Cms+5

CVE-2026-41254

·

Published

2026-02-19

·

Updated

2026-08-31

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Little CMS (lcms2) versions prior to 2.19
Description An integer overflow occurs in the CubeSize calculation within the cmslut.c file because the overflow check is executed after the multiplication operation.
Recommendations Update to a version newer than 2.18.

Exploit

Fix

DoS

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-190CWE-696

Related Identifiers

ALSA-2026:42877
ALSA-2026:42887
ALSA-2026:42895
ALSA-2026:42899
AZL-83075
AZL-83081
BDU:2026-11377
BIT-JAVA-2026-41254
BIT-JAVA-MIN-2026-41254
BIT-JRE-2026-41254
CVE-2026-41254
ECHO-9584-7CF3-54EC
GHSA-4XP6-RCGG-M9QQ
OESA-2026-2128
OPENSUSE-SU-2026:11335-1
OPENSUSE-SU-2026:11336-1
OPENSUSE-SU-2026:11362-1
OPENSUSE-SU-2026:11363-1
OPENSUSE-SU-2026:11453-1
OPENSUSE-SU-2026:11485-1
OPENSUSE-SU-2026:11486-1
OPENSUSE-SU-2026:11488-1
OPENSUSE-SU-2026:11489-1
OPENSUSE-SU-2026:21202-1
OPENSUSE-SU-2026:21440-1
OPENSUSE-SU-2026:21467-1
OPENSUSE-SU-2026:21470-1
RHSA-2026:42876
RHSA-2026:42877
RHSA-2026:42880
RHSA-2026:42887
RHSA-2026:42895
RHSA-2026:42899
SUSE-SU-2026:22070-1
SUSE-SU-2026:22506-1
SUSE-SU-2026:22944-1
SUSE-SU-2026:22953-1
SUSE-SU-2026:3284-1
SUSE-SU-2026:3331-1
SUSE-SU-2026:3332-1
SUSE-SU-2026:3406-1
SUSE-SU-2026:3453-1
SUSE-SU-2026:3614-1
SUSE-SU-2026:3615-1
SUSE-SU-2026:3622-1
SUSE-SU-2026:3623-1
USN-8209-1
USN-8209-2
USN-8673-1
USN-8674-1
USN-8676-1
USN-8677-1
USN-8681-1
USN-8689-1
USN-8693-1
USN-8694-1
USN-8695-1

Affected Products

Ibm Aix
Java Platform
Linuxmint
Little Cms
Rocky Linux
Ubuntu