The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk | Dec 1, 2016 | Apr 9, 2009 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | Oct 30, 2017 | Apr 9, 2009 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-src | Oct 16, 2024 | Apr 9, 2009 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 2, 2009 |
| Suse | — | Upgrade mozilla-xulrunner190-gnomevfsUpgrade mozilla-xulrunner190-translationsUpgrade liblcms1-32bitUpgrade liblcms-develUpgrade liblcms1Upgrade mozilla-xulrunner190-x86Upgrade liblcms1-x86Upgrade python-lcmsUpgrade mozilla-xulrunner190-32bitUpgrade liblcms-devel-32bitUpgrade mozilla-xulrunner190Upgrade lcms | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade liblcms1 | Nov 8, 2024 | Apr 9, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub