--- id: CVE-2016-10165 title: >- The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read. summary: >- The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read. severity: high cvss: 7.1 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H' cwe: - CWE-125 vendor: littlecms product: little_cms_color_engine affected: - little_cms_color_engine < 2.11 - ubuntu_linux = 12.04 - ubuntu_linux = 14.04 - ubuntu_linux = 16.04 - ubuntu_linux = 18.04 - debian_linux = 8.0 - leap = 42.1 - satellite = 5.8 - enterprise_linux_desktop = 5.0 - enterprise_linux_desktop = 6.0 - enterprise_linux_desktop = 7.0 - enterprise_linux_server = 5.0 - enterprise_linux_server = 6.0 - enterprise_linux_server = 7.0 - enterprise_linux_server_aus = 7.3 - enterprise_linux_server_aus = 7.4 - enterprise_linux_server_aus = 7.6 - enterprise_linux_server_aus = 7.7 - enterprise_linux_server_eus = 7.3 - enterprise_linux_server_eus = 7.4 - enterprise_linux_server_eus = 7.5 - enterprise_linux_server_eus = 7.6 - enterprise_linux_server_eus = 7.7 - enterprise_linux_server_tus = 7.3 - enterprise_linux_server_tus = 7.6 - enterprise_linux_server_tus = 7.7 - enterprise_linux_workstation = 5.0 - enterprise_linux_workstation = 6.0 - enterprise_linux_workstation = 7.0 - active_iq_unified_manager >= 7.3 - active_iq_unified_manager >= 9.5 - e-series_santricity_management - e-series_santricity_os_controller = 11.0 - e-series_santricity_os_controller = 11.0.0 - e-series_santricity_os_controller = 11.20 - e-series_santricity_os_controller = 11.25 - e-series_santricity_os_controller = 11.30 - e-series_santricity_os_controller = 11.30.5r3 - e-series_santricity_os_controller = 11.40 - e-series_santricity_os_controller = 11.40.3r2 - e-series_santricity_os_controller = 11.40.5 - e-series_santricity_os_controller = 11.50.1 - e-series_santricity_os_controller = 11.50.2 - e-series_santricity_os_controller = 11.60 - e-series_santricity_os_controller = 11.60.0 - e-series_santricity_os_controller = 11.60.1 - e-series_santricity_os_controller = 11.60.3 - e-series_santricity_os_controller = 11.70.1 - e-series_santricity_os_controller = 11.70.2 - oncommand_balance - oncommand_insight - oncommand_performance_manager - oncommand_shift - oncommand_unified_manager - oncommand_unified_manager = 7.1 patched: - little_cms_color_engine 2.11 published: '2017-02-03' updated: '2026-10-15' sourceUpdated: '2026-10-15T16:17:23.083' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2016-10165' references: - url: 'http://lists.opensuse.org/opensuse-updates/2017-01/msg00174.html' label: cve@mitre.org - url: 'http://rhn.redhat.com/errata/RHSA-2016-2079.html' label: cve@mitre.org - url: 'http://rhn.redhat.com/errata/RHSA-2016-2658.html' label: cve@mitre.org - url: 'http://www.debian.org/security/2017/dsa-3774' label: cve@mitre.org - url: 'http://www.openwall.com/lists/oss-security/2017/01/23/1' label: cve@mitre.org - url: 'http://www.openwall.com/lists/oss-security/2017/01/25/14' label: cve@mitre.org - url: >- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html label: cve@mitre.org - url: 'http://www.securityfocus.com/bid/95808' label: cve@mitre.org - url: 'http://www.securitytracker.com/id/1039596' label: cve@mitre.org - url: 'https://access.redhat.com/errata/RHSA-2017:2999' label: cve@mitre.org - url: 'https://access.redhat.com/errata/RHSA-2017:3046' label: cve@mitre.org - url: 'https://access.redhat.com/errata/RHSA-2017:3264' label: cve@mitre.org - url: 'https://access.redhat.com/errata/RHSA-2017:3267' label: cve@mitre.org - url: 'https://access.redhat.com/errata/RHSA-2017:3268' label: cve@mitre.org - url: 'https://access.redhat.com/errata/RHSA-2017:3453' label: cve@mitre.org - url: >- https://github.com/mm2/Little-CMS/commit/5ca71a7bc18b6897ab21d815d15e218e204581e2 label: cve@mitre.org - url: 'https://security.netapp.com/advisory/ntap-20171019-0001/' label: cve@mitre.org - url: 'https://usn.ubuntu.com/3770-1/' label: cve@mitre.org - url: 'https://usn.ubuntu.com/3770-2/' label: cve@mitre.org - url: 'http://lists.opensuse.org/opensuse-updates/2017-01/msg00174.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2016-2079.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2016-2658.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.debian.org/security/2017/dsa-3774' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.openwall.com/lists/oss-security/2017/01/23/1' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.openwall.com/lists/oss-security/2017/01/25/14' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.securityfocus.com/bid/95808' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.securitytracker.com/id/1039596' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://access.redhat.com/errata/RHSA-2017:2999' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://access.redhat.com/errata/RHSA-2017:3046' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://access.redhat.com/errata/RHSA-2017:3264' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://access.redhat.com/errata/RHSA-2017:3267' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://access.redhat.com/errata/RHSA-2017:3268' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://access.redhat.com/errata/RHSA-2017:3453' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://github.com/mm2/Little-CMS/commit/5ca71a7bc18b6897ab21d815d15e218e204581e2 label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20171019-0001/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/3770-1/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://usn.ubuntu.com/3770-2/' label: af854a3a-2127-422b-91ae-364da2661108 tags: - nvd - cve.org epss: 0.02762 epssPercentile: 0.86203 ssvc: exploitation: none automatable: 'no' technicalImpact: partial timestamp: '2026-10-08T21:07:53.406761Z' ingestedAt: '2026-10-15T16:13:11.494Z' --- ## Overview The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read. ## Affected - `little_cms_color_engine < 2.11` - `ubuntu_linux = 12.04` - `ubuntu_linux = 14.04` - `ubuntu_linux = 16.04` - `ubuntu_linux = 18.04` - `debian_linux = 8.0` - `leap = 42.1` - `satellite = 5.8` - `enterprise_linux_desktop = 5.0` - `enterprise_linux_desktop = 6.0` - `enterprise_linux_desktop = 7.0` - `enterprise_linux_server = 5.0` - `enterprise_linux_server = 6.0` - `enterprise_linux_server = 7.0` - `enterprise_linux_server_aus = 7.3` - `enterprise_linux_server_aus = 7.4` - `enterprise_linux_server_aus = 7.6` - `enterprise_linux_server_aus = 7.7` - `enterprise_linux_server_eus = 7.3` - `enterprise_linux_server_eus = 7.4` - `enterprise_linux_server_eus = 7.5` - `enterprise_linux_server_eus = 7.6` - `enterprise_linux_server_eus = 7.7` - `enterprise_linux_server_tus = 7.3` - `enterprise_linux_server_tus = 7.6` - `enterprise_linux_server_tus = 7.7` - `enterprise_linux_workstation = 5.0` - `enterprise_linux_workstation = 6.0` - `enterprise_linux_workstation = 7.0` - `active_iq_unified_manager >= 7.3` - `active_iq_unified_manager >= 9.5` - `e-series_santricity_management` - `e-series_santricity_os_controller = 11.0` - `e-series_santricity_os_controller = 11.0.0` - `e-series_santricity_os_controller = 11.20` - `e-series_santricity_os_controller = 11.25` - `e-series_santricity_os_controller = 11.30` - `e-series_santricity_os_controller = 11.30.5r3` - `e-series_santricity_os_controller = 11.40` - `e-series_santricity_os_controller = 11.40.3r2` - `e-series_santricity_os_controller = 11.40.5` - `e-series_santricity_os_controller = 11.50.1` - `e-series_santricity_os_controller = 11.50.2` - `e-series_santricity_os_controller = 11.60` - `e-series_santricity_os_controller = 11.60.0` - `e-series_santricity_os_controller = 11.60.1` - `e-series_santricity_os_controller = 11.60.3` - `e-series_santricity_os_controller = 11.70.1` - `e-series_santricity_os_controller = 11.70.2` - `oncommand_balance` - `oncommand_insight` - `oncommand_performance_manager` - `oncommand_shift` - `oncommand_unified_manager` - `oncommand_unified_manager = 7.1` ## Remediation Upgrade past the affected range: - `little_cms_color_engine 2.11`