{"action":"Upgrade lcms2 to 2.8-4 or later.","affected":[{"fixed":"2.8-4","introduced":"0"}],"component":"lcms2","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.8-4"],"id":"tcs_01M5NBEAX9GRAC1J3VY7CB689P","modified_at":"2026-10-15T19:47:34.999716455Z","published_at":"2017-02-03T19:59:00.177Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-10165","https://security-tracker.debian.org/tracker/CVE-2016-10165"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-10165","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-10165"}],"summary":"The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which t"}