Kimageformats: Use-of-uninitialized-value
Affects kimageformatsSource GCVE Database
Rated Medium by Threat Radar's AI analysis
- Patch
- Available – fixed in b7b438f90386494c833f392dfdcbec062bb4a088
Data as of 15 Nov 2026, 01:55 UTC
What to do
Upgrade kimageformats to b7b438f90386494c833f392dfdcbec062bb4a088.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzkimageformatspkg:generic/kimageformatsOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and should be applied. The fix is included in commit b7b438f90386494c833f392dfdcbec062bb4a088. Users should update to a version including this fix to remediate the vulnerability.
Description
A use-of-uninitialized-value vulnerability was identified in the kimageformats component, specifically in the comp_func_SourceOver_avx2 function. This issue was reported by OSS-Fuzz and affects multiple released versions of kimageformats. A fix has been implemented and is available in a specific commit.