Skip to main content
VulnerabilityPublished Updated

readImage4v2 · Kimageformats: Heap-buffer-overflow

Affects kimageformatsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 9 Sep 2026, 15:47 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzkimageformatspkg:generic/kimageformatsOther threatsAffected
  • >=3590a43fc506afca40a20b09fb6e8007b6dcf5b8
  • =v6.5.0-rc1
  • =v6.5.0
  • =v6.6.0-rc1
  • =v6.6.0
  • =v6.7.0-rc1
  • =v6.7.0
  • =v6.8.0-rc1
  • =v6.8.0
  • =v6.9.0-rc1
  • =v6.9.0
  • =v6.10.0-rc1
  • =v6.10.0
  • =v6.11.0-rc1
  • =v6.11.0
  • =v6.12.0-rc1
  • =v6.12.0-rc2
  • =v6.12.0
  • =v6.13.0-rc1
  • =v6.13.0
  • =v6.14.0-rc1
  • =v6.14.0
  • =v6.15.0-rc1
  • =v6.15.0
  • =v6.16.0-rc1
  • =v6.16.0
  • =v6.17.0
  • =v6.17.0-rc1
  • =v6.18.0
  • =v6.18.0-rc1
  • =v6.19.0-rc1
  • =v6.19.0
  • =v6.20.0-rc1
  • =v6.20.0
  • =v6.21.0-rc1
  • =v6.21.0
  • =v6.22.0-rc1
  • =v6.22.0
  • =v6.23.0-rc1
  • =v6.23.0
  • =v6.24.0-rc1
  • =v6.24.0
  • =v6.25.0-rc1
  • =v6.25.0
  • =v6.26.0-rc1
  • =v6.26.0
  • =v6.27.0-rc1
  • =v6.27.0
  • =v6.28.0-rc1
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until an official fix is released, users should consider avoiding processing untrusted PCX image files with affected versions of kimageformats or apply any available upstream patches from the OSS-Fuzz or kimageformats maintainers.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70554 ``` Crash type: Heap-buffer-overflow WRITE 1 Crash state: readImage4v2 PCXHandler::read kimgio_fuzzer.cc ```

References

Community reviews

Loading reviews…