https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:50:13 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2016-10165 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2016-10165 https://cve.radiocsirt.org/vuln/certfr-2017-avi-366 certfr-2017-avi-366 https://cve.radiocsirt.org/vuln/certfr-2017-avi-366 https://cve.radiocsirt.org/vuln/cnvd-2017-01125 cnvd-2017-01125 https://cve.radiocsirt.org/vuln/cnvd-2017-01125 https://cve.radiocsirt.org/vuln/euvd-2026-88358 EUVD-2026-88358 https://cve.radiocsirt.org/vuln/euvd-2026-88358 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10165 <p>The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.</p> <p>The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-10165 https://cve.radiocsirt.org/vuln/ghsa-2j4r-j436-59p3 <p>The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.</p> <p>The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.</p> https://cve.radiocsirt.org/vuln/ghsa-2j4r-j436-59p3 https://cve.radiocsirt.org/vuln/gsd-2016-10165 gsd-2016-10165 https://cve.radiocsirt.org/vuln/gsd-2016-10165 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10876-1 <p>java-1_8_0-openjdk-1.8.0.302-2.2 on GA media</p> <p>java-1_8_0-openjdk-1.8.0.302-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10876-1 https://cve.radiocsirt.org/vuln/rhsa-2017:2999 <p>zlib: Out-of-bound pointer arithmetic in inftrees.c zlib: Out-of-bounds pointer arithmetic in inffast.c zlib: Undefined left shift of negative number zlib: Big-endian out-of-bounds pointer lcms2: Out-of-bounds read in Type_MLU_Read() OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026) OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109) OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966) JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc) OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751) JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment) OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370) OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711) OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323) OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432) OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327) OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100) OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612) OpenJDK: weak protection of key stores against brute forcing (Security, 8181692) OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serializatio…</p> <p>zlib: Out-of-bound pointer arithmetic in inftrees.c zlib: Out-of-bounds pointer arithmetic in inffast.c zlib: Undefined left shift of negative number zlib: Big-endian out-of-bounds pointer lcms2: Out-of-bounds read in Type_MLU_Read() OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026) OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109) OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966) JDK: unspecified vulnerability fixed in 6u171, 7u161, 8u151, and 9.0.1 (Javadoc) OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751) JDK: unspecified vulnerability fixed in 8u151 and 9.0.1 (Deployment) OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370) OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711) OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323) OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432) OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327) OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100) OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612) OpenJDK: weak protection of key stores against brute forcing (Security, 8181692) OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serializatio…</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2999 https://cve.radiocsirt.org/vuln/suse-su-2017:2989-1 <p>Security update for java-1_8_0-openjdk</p> <p>Security update for java-1_8_0-openjdk</p> https://cve.radiocsirt.org/vuln/suse-su-2017:2989-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10165 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lcms2, Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: lcms2, Ubuntu:18.04:LTS: lcms2</p> <p>The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lcms2, Ubuntu:14.04:LTS: openjdk-7, Ubuntu:16.04:LTS: lcms2, Ubuntu:18.04:LTS: lcms2</p> <p>The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10165