CVE-2009-0793

no score yetEPSS 4.8%

cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."

EPSS: 4.8% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2009-04-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

littlecms:lcms
sun:openjdk

References

http://secunia.com/advisories/34623
http://secunia.com/advisories/34632
http://secunia.com/advisories/34634
http://secunia.com/advisories/34635
http://secunia.com/advisories/34675

Check your stack JSON