Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Little CMS cmsAllocGamma 缓冲区溢出和整数值有符号漏洞
Vulnerability Description
Little cms是一个色彩管理库程序。 Little cms 颜色引擎(又称lcms) 1.17之前的版本的src/cmsgamma.c中的cmsAllocGamma函数存在带符号整数错误。攻击者可以借助一个包含"输入数量"值得一个文件来具有未知影响。由于它没有被适当地解释，会引起内存不充分的分配。
CVSS Information
N/A
Vulnerability Type
N/A