Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.
2.12~rc1-2ubuntu0.12.14-2ubuntu0.12.16-2ubuntu0.12.17-1ubuntu0.12.5-0ubuntu4.2+esm12.6-3ubuntu2.1+esm12.9-1ubuntu0.1+esm12.9-4ubuntu0.1~esm1Exploitability
AV:LAC:HPR:NUI:NScope
S:UImpact
C:LI:NA:LCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L