Kimageformats: Use-of-uninitialized-value
Affects kimageformatsSource GCVE Database
0
Severity
MediumRated Medium by Threat Radar's AI analysis
Data as of 9 Nov 2026, 16:03 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| OSS-Fuzzkimageformats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until a fix is available, avoid processing untrusted or malformed XCF image files with affected versions of kimageformats.
Description
A use-of-uninitialized-value vulnerability was identified in the kimageformats library within the XCFImageFormat::mergeRGBToRGB function. This issue was reported by OSS-Fuzz and involves improper handling of uninitialized memory during image layer merging operations.
References
Community reviews
Loading reviews…