Vulnerability · Published Apr 18, 2026 · Assigned by mitre
CVE-2026-41254
Medium 4.0
In plain English
A medium-severity security flaw in little cms color engine from littlecms. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.0Medium
Exploit odds (30 days)0.4%top 69.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | java-1.8.0-openjdk | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-fastdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-slowdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-demo | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-fastdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-demo-fastdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-slowdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-demo-slowdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-fastdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel-fastdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-slowdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel-slowdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-fastdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-fastdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-fastdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless-fastdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-slowdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless-slowdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-javadoc | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc-zip | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-javadoc-zip | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-slowdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-slowdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-src | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-src | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-fastdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-src-fastdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-slowdebug | 1:1.8.0.502.b07-1.1.el8 | ALSA-2026:42877 |
| AlmaLinux:9 | java-1.8.0-openjdk-src-slowdebug | 1:1.8.0.502.b07-1.2.el9.alma.1 | ALSA-2026:42877 |
| AlmaLinux:8 | java-17-openjdk | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-demo | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-demo | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-demo-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-demo-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-devel | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-devel | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-devel-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-devel-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-headless | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-headless | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-headless-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-headless-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-javadoc | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-javadoc-zip | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-jmods | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-jmods | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-jmods-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-jmods-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-src | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-src | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-src-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-src-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-static-libs | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-static-libs-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-static-libs-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:10 | java-21-openjdk | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-demo | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-demo | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-demo | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-demo-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-demo-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-demo-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-demo-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-demo-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-demo-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-devel | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-devel | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-devel | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-devel-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-devel-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-devel-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-devel-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-devel-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-devel-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-headless | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-headless | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-headless | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-headless-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-headless-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-headless-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-headless-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-headless-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-headless-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-javadoc | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-javadoc | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-javadoc | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-javadoc-zip | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-javadoc-zip | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-javadoc-zip | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-jmods | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-jmods | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-jmods | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-jmods-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-jmods-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-jmods-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-jmods-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-jmods-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-jmods-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-src | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-src | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-src | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-src-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-src-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-src-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-src-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-src-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-src-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-static-libs | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-static-libs | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-static-libs | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-static-libs-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-static-libs-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-static-libs-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-static-libs-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-static-libs-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-static-libs-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-25-openjdk | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-demo | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-demo | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-demo-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-demo-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-demo-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-demo-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-devel | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-devel | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-devel-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-devel-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-devel-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-devel-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-headless | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-headless | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-headless-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-headless-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-headless-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-headless-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-javadoc | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-javadoc | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-javadoc-zip | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-javadoc-zip | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-jmods | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-jmods | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-jmods-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-jmods-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-jmods-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-jmods-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-src | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-src | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-src-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-src-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-src-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-src-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-static-libs | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-static-libs | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| littlecms | little cms color engine | 0 – through 2.18 |
Weakness: CWE-696 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
References
- https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0
- https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc
- https://www.openwall.com/lists/oss-security/2026/04/17/16
- https://github.com/mm2/Little-CMS/security/advisories/GHSA-4xp6-rcgg-m9qq
- https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/
- https://lists.debian.org/debian-lts-announce/2026/05/msg00014.html