Search/CVE-2013-4276
● CVE

CVE-2013-4276

VendorlittlecmsProductlittle cms color engineDiscoveredSep 28, 2013UpdatedApr 29, 2026

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

View graph Watch Export
CVSS v3.1
—
EPSS
4.04%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 4, 2026
▲ 0.54pp
3.50% → 4.04% over 2 tracked changes
Connections
2 relationships
Timeline
disclosure → media coverage
Sep 28, 2013
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026