CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kis_tga_import.cpp (aka KisTgaImport). Control flow proceeds even when a number of pixels becomes negative.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
mitreCNA
6.7 MEDIUM
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 7%
Debian logo
Debian Releases
Debian Product
Codename
krita
bullseye
vulnerable
bullseye (security)
1:4.4.2+dfsg-1+deb11u1
fixed
bookworm
1:5.1.5+dfsg-2+deb12u1
fixed
bookworm (security)
1:5.1.5+dfsg-2+deb12u1
fixed
trixie (security)
1:5.2.9+dfsg-1+deb13u1
fixed
trixie
1:5.2.9+dfsg-1+deb13u1
fixed
forky
1:5.2.14+dfsg-1
fixed
sid
1:5.2.14+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
krita
questing
not-affected
plucky
ignored
noble
needs-triage
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
Common Weakness Enumeration
References
https://invent.kde.org/graphics/krita/
https://invent.kde.org/graphics/krita/-/commit/6d3651ac4df88efb68e013d21061de9846e83fe8
https://kde.org/info/security/advisory-20250929-1.txt
https://lists.debian.org/debian-lts-announce/2025/12/msg00006.html