CVE-2006-6297: Kde Kdegraphics

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Stack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service (stack consumption) via a crafted EXIF section in a JPEG file, which results in an infinite recursion.

Affected products

• Kde Kdegraphics: version 3.2 only; version 3.4.3 only

Published 2006-12-05. Last modified 2026-06-16.