CVE ID:	CVE-2018-16435
Description:	Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2021.1081   1.3.6.1.4.1.25623.1.0.852105   1.3.6.1.4.1.25623.1.1.10.2018.0387   1.3.6.1.4.1.25623.1.0.891496   1.3.6.1.4.1.25623.1.1.2.2021.1488   1.3.6.1.4.1.25623.1.1.4.2018.3498.1   1.3.6.1.4.1.25623.1.1.2.2021.1313   1.3.6.1.4.1.25623.1.0.875139   1.3.6.1.4.1.25623.1.1.2.2021.2098   1.3.6.1.4.1.25623.1.0.704284   1.3.6.1.4.1.25623.1.1.2.2020.2286   1.3.6.1.4.1.25623.1.0.875106   1.3.6.1.4.1.25623.1.1.2.2019.2342
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16435 Debian Security Information: DSA-4284 (Google Search) https://www.debian.org/security/2018/dsa-4284 https://security.gentoo.org/glsa/202105-18 https://github.com/mm2/Little-CMS/commit/768f70ca405cd3159d990e962d54456773bb8cf8 https://github.com/mm2/Little-CMS/issues/171 https://lists.debian.org/debian-lts-announce/2018/09/msg00005.html RedHat Security Advisories: RHSA-2018:3004 https://access.redhat.com/errata/RHSA-2018:3004 https://usn.ubuntu.com/3770-1/ https://usn.ubuntu.com/3770-2/