LittleCMS versions prior to 1.18beta2 suffers from various integer and buffer overflows as well as memory leak errors.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75900/CESA-2009-003.txt
Source: https://packetstormsecurity.com/files/75900/Chris-Evans-Security-Advisory-2009.3.html