Skip to main content
VulnerabilityPublished Updated

Kimageformats: Stack-use-after-scope

Affects kimageformatsSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 8 Nov 2026, 14:49 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzkimageformatspkg:generic/kimageformatsOther threatsAffected
  • v6.28.0 – v6.32.0-rc1
  • >=8768a8cf97123b559e44a8336f5ca2efa38d235f
10 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, avoid processing untrusted HEIF files with affected versions of kimageformats or use alternative libraries if possible.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=524393006 ``` Crash type: Stack-use-after-scope READ 8 Crash state: StreamReader_CApi::wait_for_file_size Box_iloc::read_data HeifFile::append_data_from_iloc ```

References

Community reviews

Loading reviews…