Approved changes feed: RSS · Atom

cpe:2.3:a:littlecms:little_cms_color_engine:2.4:*:*:*:*:*:*:*

part: a version: 2.4 update: *

VendorLittlecms (de2842e2-f326-5c13-90f6-56cba8b115a4)
ProductLittle Cms Color Engine (187bbdd1-8088-5b94-a292-03d130aa7d0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/lcms2 purl2cpe 2026-06-01 10:16:16.841235
pkg:deb/ubuntu/lcms2 purl2cpe 2026-06-01 10:16:16.841236
pkg:github/mm2/little-cms purl2cpe 2026-06-01 10:16:16.841238
pkg:gitlab/redhat/lcms2 purl2cpe 2026-06-01 10:16:16.841239
pkg:rpm/centos/lcms2 purl2cpe 2026-06-01 10:16:16.841240
pkg:rpm/fedora/lcms purl2cpe 2026-06-01 10:16:16.841242
pkg:rpm/fedora/lcms2 purl2cpe 2026-06-01 10:16:16.841243
pkg:rpm/opensuse/lcms purl2cpe 2026-06-01 10:16:16.841244
pkg:rpm/opensuse/lcms2 purl2cpe 2026-06-01 10:16:16.841246
pkg:sourceforge/lcms purl2cpe 2026-06-01 10:16:16.841247

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7455 vulnerable 2026-06-08 05:05:10.380490 Details available
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.
Published: 2016-05-07T10:00:00.000Z
Updated: 2024-08-06T18:09:16.976Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.