CVE-2010-2575: Kde Sc

Medium severity, CVSS 6.8. EPSS: 4.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.

Affected products

• Kde Kde Sc: version 4.3.0 only; version 4.3.1 only; version 4.3.2 only; version 4.3.3 only; version 4.3.4 only; version 4.3.5 only; …

Published 2010-08-30. Last modified 2026-06-16.