The kimageformats library contains a heap-buffer-overflow vulnerability in the XCFImageFormat::loadTileRLE function, which is triggered during the loading of image tiles using run-length encoding. The overflow occurs due to an out-of-bounds write on the heap, as identified by OSS-Fuzz. This vulnerability can lead to memory corruption and potentially impact application stability or security. The issue affects versions starting from commit 4badb3088e90d86208ed6bd435df7fe6a022be64 onward. No official patch or remediation details have been provided in the available data.

Heap-buffer-overflow vulnerabilities can cause memory corruption, which may lead to application crashes or potentially enable an attacker to execute arbitrary code if exploited. However, no known exploits are currently reported in the wild for this vulnerability.

Patch status is not yet confirmed — check the vendor advisory or OSS-Fuzz report for current remediation guidance. Until a fix is available, avoid processing untrusted XCF image files with affected versions of kimageformats to reduce risk.