KDE Krita vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting KDE Krita: 1 record(s), with affected versions and fixes.
CVE-2025-59820
Medium · 6.7
CWE-1284 Nov 26, 2025
In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based…
In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kis_tga_import.cpp (aka KisTgaImport). Control flow proceeds even when a number of pixels becomes negative.