CVE-2009-0793: Littlecms Lcms
Medium severity, CVSS 4.3. EPSS: 4.8% chance of exploitation in the next 30 days.
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
Affected products
Published 2009-04-09. Last modified 2026-06-16.