Back Linuxsecurity

Fedora 43 Krita Critical Integer Overflow Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 28, 2026

* Wed Jun 17 2026 Than Ngo - 5.2.16-2 - Fix rhbz#2476570, CVE-2026-42144 integer overflow in PNM size check bypasses memory guard

[ 1 ] Bug #2476573 - CVE-2026-42144 krita: integer overflow in PNM size check bypasses memory guard (_load_pnm) [epel-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-45b342f7c1' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Integer Overflow Vulnerability in Krita Affects Fedora 43 and 44 A critical integer overflow vulnerability, CVE-2026-42144, has been identified in Krita, affecting both Fedora 43 and Fedora 44. The flaw allows attackers to bypass memory guards during PNM size checks, potentially leading to arbitrary code execution. Fedora 44 has been updated to version 6.0.2.1 to address this issue, while Fedora 43 has been patched to version 5.2.16-2. The vulnerability was published on May 4, 2026, and has been confirmed in both versions of the software. Users are advised to upgrade their installations using the provided dnf commands. The flaw impacts systems running Krita, a popular open-source digital painting application. Immediate action is recommended to mitigate potential exploitation. 2 sources 73

Extracted Entities

Fedora 43 Krita Critical Integer Overflow Fix CVE-2026

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)