CVE-2016-10165
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
- CVSS 3.1
- 7.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - EPSS
- 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-25)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- littlecms:little_cms_color_engine
- netapp:active_iq_unified_manager
- netapp:e-series_santricity_management
- netapp:e-series_santricity_os_controller
- netapp:oncommand_balance
- netapp:oncommand_insight
- netapp:oncommand_performance_manager
- netapp:oncommand_shift
- netapp:oncommand_unified_manager
- opensuse:leap
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_eus
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_workstation
- redhat:satellite