Index-out-of-bounds in derive_spatial_luma_vector_prediction in kimageformats
Summary
OSV-2023-769: Index-out-of-bounds in derive_spatial_luma_vector_prediction. Affects kimageformats versions >= ca52d4ddf540cc731d0f31dbccc1897f7e6d9db4, < f6bb59228e8e8ad09915c46aec83954384b4f6aa. Fixed in f6bb59228e8e8ad09915c46aec83954384b4f6aa. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
kimageformats is an open-source package that provides support for various image formats in the KDE framework. It enables applications to read and write different image file types. This vulnerability affects the package and can lead to an index-out-of-bounds error.
Vulnerability Detail
The vulnerability in derive_spatial_luma_vector_prediction function of kimageformats allows for an index-out-of-bounds error. This can be triggered when processing certain image files, potentially leading to a crash or arbitrary code execution. The issue was reported through OSS-Fuzz, and more details can be found in the provided bug report. The severity of this vulnerability is considered medium.
How To Fix
Minimum fixed version
f6bb59228e8e8ad09915c46aec83954384b4f6aa
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is recommended to apply the fix mentioned above by updating to the latest version of kimageformats.
Conclusion
In conclusion, the index-out-of-bounds vulnerability in derive_spatial_luma_vector_prediction function of kimageformats can be resolved by updating to the latest version. It is important to stay up-to-date with security patches to mitigate potential risks. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for kimageformats →
FAQ
kimageformats is an open-source package that provides support for various image formats in the KDE framework.
This vulnerability can lead to an index-out-of-bounds error, potentially resulting in a crash or arbitrary code execution.
This vulnerability was reported through OSS-Fuzz, a continuous fuzzing service for open-source software.
The severity of this vulnerability is considered medium.
To fix this vulnerability, update kimageformats to the latest version.
References
Related vulnerabilities
Recent vulnerabilities recorded for kimageformats.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
