OSV-2026-928

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/kimageformats/OSV-2026-928.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-928
Published
2026-06-17T00:06:18.594494Z
Modified
2026-06-17T00:06:18.594761Z
Summary
Stack-use-after-scope in StreamReader_CApi::wait_for_file_size
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=524393006

Crash type: Stack-use-after-scope READ 8
Crash state:
StreamReader_CApi::wait_for_file_size
Box_iloc::read_data
HeifFile::append_data_from_iloc
References

Affected packages

OSS-Fuzz / kimageformats

Package

Name
kimageformats
Purl
pkg:generic/kimageformats

Affected ranges

Type
GIT
Repo
https://invent.kde.org/frameworks/kimageformats.git
Events
Introduced
8768a8cf97123b559e44a8336f5ca2efa38d235f

Affected versions

v6.*
v6.28.0
v6.28.0-rc1

Ecosystem specific 

{
    "severity": null
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/kimageformats/OSV-2026-928.yaml"