Skip to main content
VulnerabilityPublished Updated

Kimageformats: Use-of-uninitialized-value

Affects kimageformatsSource GCVE Database

0
Severity
Unrated

Rated by Threat Radar

Data as of 8 Nov 2026, 14:50 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-FuzzkimageformatsAffected
  • v5.80.0 – v6.32.0-rc1
  • >=ca52d4ddf540cc731d0f31dbccc1897f7e6d9db4
141 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, cautious handling of untrusted image data and disabling or sandboxing the vulnerable component may reduce risk.

Description

A use-of-uninitialized-value vulnerability was identified in the kimageformats component, specifically in the decode_CABAC_FL_bypass function. This issue was reported by OSS-Fuzz and involves uninitialized memory usage during decoding operations.

References

Community reviews

Loading reviews…