CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kis_tga_import.cpp (aka KisTgaImport). Control flow proceeds even when a number of pixels becomes negative.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
mitreCNA
6.7 MEDIUM
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Debian logo
Debian Releases
Debian Product
Codename
krita
bullseye
vulnerable
bookworm
vulnerable
bookworm (security)
1:5.1.5+dfsg-2+deb12u1
fixed
trixie
vulnerable
trixie (security)
1:5.2.9+dfsg-1+deb13u1
fixed
forky
1:5.2.13+dfsg-2
fixed
sid
1:5.2.13+dfsg-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
krita
questing
not-affected
plucky
needs-triage
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
Common Weakness Enumeration
References
https://invent.kde.org/graphics/krita/
https://invent.kde.org/graphics/krita/-/commit/6d3651ac4df88efb68e013d21061de9846e83fe8
https://kde.org/info/security/advisory-20250929-1.txt