PT-2026-33596

CVE-2026-41254

·

Published

2026-02-19

·

Updated

2026-10-16

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Little CMS (lcms2) versions prior to 2.19
Description An integer overflow occurs in the CubeSize calculation within the cmslut.c file because the overflow check is executed after the multiplication operation.
Recommendations Update to a version newer than 2.18.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-190: Integer Overflow or Wraparound
CWE-696: Incorrect Behavior Order
Related identifiers
CVE-2026-41254
BDU:2026-11377
GHSA-4XP6-RCGG-M9QQ
ALSA-2026:42877
ALSA-2026:42887
ALSA-2026:42895
ALSA-2026:42899
AZL-83075
AZL-83081
BIT-JAVA-2026-41254
BIT-JAVA-MIN-2026-41254
BIT-JRE-2026-41254
CLSA-2026-1785151654
CLSA-2026-1785152037
CLSA-2026-1785152373
CLSA-2026-1785266060
CLSA-2026-1785324019
CLSA-2026-1785328191
CLSA-2026-1785494509
CLSA-2026-1785501342
CLSA-2026-1787219937
CLSA-2026-1787220312
CLSA-2026-1788346723
ECHO-9584-7CF3-54EC
OESA-2026-2128
OESA-2026-3737
OESA-2026-3738
OESA-2026-3739
OESA-2026-3740
OESA-2026-3741
OESA-2026-3750
OESA-2026-3751
OESA-2026-3752
OESA-2026-3753
OESA-2026-3754
OESA-2026-3818
OPENSUSE-SU-2026:11335-1
OPENSUSE-SU-2026:11336-1
OPENSUSE-SU-2026:11362-1
OPENSUSE-SU-2026:11363-1
OPENSUSE-SU-2026:11453-1
OPENSUSE-SU-2026:11485-1
OPENSUSE-SU-2026:11486-1
OPENSUSE-SU-2026:11488-1
OPENSUSE-SU-2026:11489-1
OPENSUSE-SU-2026:21202-1
OPENSUSE-SU-2026:21440-1
OPENSUSE-SU-2026:21467-1
OPENSUSE-SU-2026:21470-1
RHSA-2026:42876
RHSA-2026:42877
RHSA-2026:42880
RHSA-2026:42887
RHSA-2026:42895
RHSA-2026:42899
SUSE-SU-2026:22070-1
SUSE-SU-2026:22506-1
SUSE-SU-2026:22944-1
SUSE-SU-2026:22953-1
SUSE-SU-2026:23443-1
SUSE-SU-2026:3284-1
SUSE-SU-2026:3331-1
SUSE-SU-2026:3332-1
SUSE-SU-2026:3406-1
SUSE-SU-2026:3453-1
SUSE-SU-2026:3614-1
SUSE-SU-2026:3615-1
SUSE-SU-2026:3622-1
SUSE-SU-2026:3623-1
SUSE-SU-2026:3964-1
SUSE-SU-2026:4056-1
SUSE-SU-2026:4205-1
USN-8209-1
USN-8209-2
USN-8673-1
USN-8674-1
USN-8676-1
USN-8677-1
USN-8681-1
USN-8689-1
USN-8693-1
USN-8694-1
USN-8695-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com