Little CMS (lcms2) before 2.5 as used in OpenJDK 7 and possibly other products allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves (2) cmsPipelineDup (3) cmsAllocProfileSequenceDescription (4) CurvesAlloc and (5) cmsnamed.