KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE.
References
Link | Resource |
---|---|
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33742 | Exploit Issue Tracking Patch Third Party Advisory |
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/kimageformats/OSV-2021-695.yaml | Third Party Advisory |
https://invent.kde.org/frameworks/kimageformats/commit/297ed9a2fe339bfe36916b9fce628c3242e5be0f | Patch Third Party Advisory |
Configurations
History
08 Jul 2021, 17:36
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33742 - Exploit, Issue Tracking, Patch, Third Party Advisory | |
References | (MISC) https://invent.kde.org/frameworks/kimageformats/commit/297ed9a2fe339bfe36916b9fce628c3242e5be0f - Patch, Third Party Advisory | |
References | (MISC) https://github.com/google/oss-fuzz-vulns/blob/main/vulns/kimageformats/OSV-2021-695.yaml - Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 5.5 |
CWE | CWE-787 | |
CPE | cpe:2.3:a:kde:kimageformats:*:*:*:*:*:*:*:* |
01 Jul 2021, 03:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-07-01 03:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-36083
Mitre link : CVE-2021-36083
CVE.ORG link : CVE-2021-36083
JSON object : View
Products Affected
kde
- kimageformats
CWE
CWE-787
Out-of-bounds Write