CVE-2025-59820 – KDE Krita TGA File Heap-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-59820

Published : Nov. 26, 2025, 6:15 a.m. | 2 hours, 4 minutes ago

Description : In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kis_tga_import.cpp (aka KisTgaImport). Control flow proceeds even when a number of pixels becomes negative.

Severity: 6.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…