[SECURITY] Fedora 44 Update: kf6-karchive-6.25.0-1.fc44

KDE Frameworks 6 Tier 1 addon with archive functions...

karchive:ktar_zst_fuzzer: Use-of-uninitialized-value in QIODevice::read

Detailed Report: https://oss-fuzz.com/testcase?key=6030872209063936 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: ktarzstfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QIODevice::read...

karchive:k7z_fuzzer: Use-of-uninitialized-value in QUtf8::convertToUnicode

Detailed Report: https://oss-fuzz.com/testcase?key=6333009820450816 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: k7zfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QUtf8::convertToUnicode...

karchive:k7z_fuzzer: Use-of-uninitialized-value in K7Zip::openArchive

Detailed Report: https://oss-fuzz.com/testcase?key=6574051113107456 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: k7zfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: K7Zip::openArchive karchivefuzzer.cc...

karchive:ktar_xz_fuzzer: Use-of-uninitialized-value in lzma_index_hash_decode

Detailed Report: https://oss-fuzz.com/testcase?key=4813479728185344 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: ktarxzfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: lzmaindexhashdecode streamdecode autodeco...

karchive:k7z_fuzzer: Use-of-uninitialized-value in crc32_z

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=5913949670539264 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: k7zfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: crc3...

karchive:kzip_fuzzer: Use-of-uninitialized-value in inflate

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=4860655984508928 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: kzipfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

karchive:ktar_lz_fuzzer: Use-of-uninitialized-value in KTar::KTarPrivate::readRawHeader

Detailed Report: https://oss-fuzz.com/testcase?key=5368230320603136 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: ktarlzfuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: KTar::KTarPrivate::readRawHeader...

EUVD-2016-7163

Malware in sbrugna...

karchive:karchive_fuzzer: Heap-buffer-overflow in K7Zip::K7ZipPrivate::readHashDigests

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=5530496077725696 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: karchivefuzzer Job Type: libfuzzerasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2025-256 Global-buffer-overflow in QByteArray::QByteArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=408025086 Crash type: Global-buffer-overflow READ 15 Crash state: QByteArray::QByteArray KZip::openArchive KArchive::open...

PT-2025-22633 · Git +1 · Archive

Name of the Vulnerable Software and Affected Versions: KArchive affected versions not specified Description: The software suffers from a global-buffer-overflow read issue. The crash occurs during the parseExtraField function, within the KZip::openArchive and KArchive::open functions...

PT-2025-22954 · Git +1 · Kimageformats

Name of the Vulnerable Software and Affected Versions: KArchive affected versions not specified Description: The software experiences a global-buffer-overflow read issue during archive processing. The crash state indicates the issue occurs within the QByteArray::QByteArray, KZip::openArchive, and...

karchive:karchive_fuzzer: Global-buffer-overflow in parseExtraField

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=5002746367639552 Project: karchive Fuzzing Engine: afl Fuzz Target: karchivefuzzer Job Type: aflasankarchive Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x5864d4ec854d Crash...

kimageformats:kimgio_ora_fuzzer: Global-buffer-overflow in QByteArray::QByteArray

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4544144121069568 Project: kimageformats Fuzzing Engine: honggfuzz Fuzz Target: kimgioorafuzzer Job Type: honggfuzzasankimageformats Platform Id: linux Crash Type: Global-buffer-overflow READ 15 Crash...

karchive:karchive_fuzzer: Heap-buffer-overflow in crc64_clmul

Detailed Report: https://oss-fuzz.com/testcase?key=6102147979083776 Project: karchive Fuzzing Engine: centipede Fuzz Target: karchivefuzzer Job Type: centipedeasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x6290010f8210 Crash State: crc64clmul...

SUSE CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

karchive:karchive_fuzzer: Heap-buffer-overflow in crc64_clmul

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=6317041720360960 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: karchivefuzzer Job Type: libfuzzerasankarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

karchive:karchive_fuzzer: Stack-buffer-overflow in KTar::KTarPrivate::readHeader

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=5632739014606848 Project: karchive Fuzzing Engine: honggfuzz Fuzz Target: karchivefuzzer Job Type: honggfuzzasankarchive Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffff7f75a...

karchive:karchive_fuzzer: Use-of-uninitialized-value in crc32_little

Project: git://anongit.kde.org/karchive Detailed Report: https://oss-fuzz.com/testcase?key=5658463115411456 Project: karchive Fuzzing Engine: libFuzzer Fuzz Target: karchivefuzzer Job Type: libfuzzermsankarchive Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...