Gentoo Linux Security Advisory GLSA 200904-19 – Multiple errors in LittleCMS allow for attacks including the remote execution of arbitrary code. RedHat reported a null-pointer dereference flaw while processing monochrome ICC profiles. Chris Evans also discovered memory leaks, integer overflows, and stack-based overflows. Versions less than 1.18-r1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/76811/glsa-200904-19.txt
Source: https://packetstormsecurity.com/files/76811/Gentoo-Linux-Security-Advisory-200904-19.html