Skip to content
Critical Integer Overflow Vulnerability in Krita Affects Fedora 43 and 44

Critical Integer Overflow Vulnerability in Krita Affects Fedora 43 and 44

First seen 28 Jun 2026, 04:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 29, 2026 at 03:35 UTC
  • •CVE-2026-42144 is a critical integer overflow vulnerability in Krita.
  • •Affected systems include Fedora 43 and Fedora 44, with patches available.
  • •Users should upgrade to the latest versions to avoid potential exploitation.

A critical integer overflow vulnerability, CVE-2026-42144, has been identified in Krita, affecting both Fedora 43 and Fedora 44. The flaw allows attackers to bypass memory guards during PNM size checks, potentially leading to arbitrary code execution. Fedora 44 has been updated to version 6.0.2.1 to address this issue, while Fedora 43 has been patched to version 5.2.16-2. The vulnerability was published on May 4, 2026, and has been confirmed in both versions of the software. Users are advised to upgrade their installations using the provided dnf commands. The flaw impacts systems running Krita, a popular open-source digital painting application. Immediate action is recommended to mitigate potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 94d ago How this analysis works

Timeline

2026-05-04
CVE-2026-42144 published
A critical integer overflow vulnerability in Krita was disclosed, allowing memory guard bypass.
Linuxsecurity
2026-06-17
Fedora 44 patch released
Fedora 44 updated to version 6.0.2.1 to fix CVE-2026-42144 and other issues.
Linuxsecurity
2026-06-17
Fedora 43 patch released
Fedora 43 updated to version 5.2.16-2 to address CVE-2026-42144.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Fedora and CVE-2026-42144 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3