CVE-2016-10165

Vendordebian, canonical, redhat, netapp, opensuseProductdebian linux, ubuntu linux, enterprise linux server, enterprise linux server aus, enterprise linux server tus, oncommand balance, oncommand performance manager, oncommand unified manager, leap, enterprise linux desktop, enterprise linux workstation, satellite, enterprise linux server eus, active iq unified manager, oncommand insight, e-series santricity os controller, oncommand shift, e-series santricity management, little cms color engineDiscoveredFeb 3, 2017UpdatedMay 13, 2026

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

View graph Watch Export

CVSS v3.1

7.1 HIGH

EPSS

2.76%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Sep 27, 2026

▼ 0.01pp

2.77% → 2.76% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Connections

20 relationships