Kimageformats: Use-of-uninitialized-value
Affects kimageformatsSource GCVE Database
Rated Medium by Threat Radar's AI analysis
- Patch
- Available – fixed in 3488077d8d41ffaa2b44386bd3082bdb351459a3
Data as of 27 Oct 2026, 03:12 UTC
What to do
Upgrade kimageformats to 3488077d8d41ffaa2b44386bd3082bdb351459a3.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzkimageformatspkg:generic/kimageformatsOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Apply the official fix by updating to the patched version identified by commit 3488077d8d41ffaa2b44386bd3082bdb351459a3. Since a patch is available, upgrading to the fixed version is the recommended mitigation.
Description
A use-of-uninitialized-value vulnerability was identified in the kimageformats library within the PKFormatConverter_InitializeConvert function. This issue was reported by OSS-Fuzz and affects versions 6.26.0-rc1 and 6.26.0. The vulnerability has been fixed in a later commit. No CVSS score is available, and no known exploits in the wild have been reported.