CVE-2025-59820
BaseFortify
Publication date: 2025-11-26
Last updated on: 2025-12-06
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| kde | krita | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1284 | The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a heap-based buffer overflow in KDE Krita versions before 5.2.13. It occurs when loading a manipulated TGA file, specifically in the KisTgaImport plugin. The issue arises because the program continues processing even when the number of pixels becomes negative, leading to memory corruption.
How can this vulnerability impact me? :
The vulnerability can lead to memory corruption due to a heap-based buffer overflow, which may allow an attacker to alter the program's control flow. This could potentially result in denial of service or execution of arbitrary code with the privileges of the user running Krita.