An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can result in a crash.
{
"cwe_ids": [
"CWE-190",
"CWE-681"
],
"github_reviewed": true,
"github_reviewed_at": "2026-07-31T19:40:08Z",
"nvd_published_at": "2026-07-01T19:16:54Z",
"severity": "MODERATE"
}