Kimageformats: Use-of-uninitialized-value
Affects kimageformatsSource GCVE Database
Rated Medium by Threat Radar's AI analysis
- Patch
- Available – fixed in 6519d2930e83c33fd5d0a59a890a6023de030f4d
Data as of 13 Nov 2026, 19:48 UTC
What to do
Upgrade kimageformats to 6519d2930e83c33fd5d0a59a890a6023de030f4d.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzkimageformatspkg:generic/kimageformatsOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and has been applied in the fixed commit referenced. Users and maintainers should upgrade to the fixed version or apply the patch to remediate this vulnerability. No additional mitigation steps are indicated by the vendor or OSS-Fuzz report.
Description
A use-of-uninitialized-value vulnerability was identified in the QImage::pixel function within the kimageformats library. The issue was reported by OSS-Fuzz and involves improper handling in image processing functions such as XCFImageFormat::copyGrayAToRGB and XCFImageFormat::copyLayerToImage. This flaw affects multiple specific versions of kimageformats and has been fixed in a later commit.