--- a/src/java.desktop/share/native/liblcms/cmstypes.c	Thu Jul 06 09:20:21 2017 +0800
+++ b/src/java.desktop/share/native/liblcms/cmstypes.c	Thu Jul 06 09:43:27 2017 -0700
@@ -1489,6 +1489,7 @@
 
         // Check for overflow
         if (Offset < (SizeOfHeader + 8)) goto Error;
+        if (((Offset + Len) < Len) || ((Offset + Len) > SizeOfTag + 8)) goto Error;
 
         // True begin of the string
         BeginOfThisString = Offset - SizeOfHeader - 8;