CVE-2021-36083: kde kimageformats – CVSS 5.5 · Watchpost

← All vulnerabilities

CVE-2021-36083

中危 5.5CVE-2021-36083 · Published 01/07/2021 · updated 17/06/2026

要点

CVE-2021-36083 是影响 kimageformats (kde) 的中危 (CVSS 5.5)漏洞。
未来 30 天内被利用的概率（EPSS）：0.95%，高于 61.1% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
kimageformats kde	`≥ 5.70.0, ≤ 5.81.0`	No fix yet

Description

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE.

References

bugs.chromium.org/p/oss-fuzz/issues/detail · Exploit
google/oss-fuzz-vulns · Third Party Advisory
invent.kde.org/frameworks/kimageformats/commit/297ed9a2fe339bfe36916b9fce628c3242e5be0f · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free