KDE KImageFormats 5.70.0 up to and including 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE.
kde kimageformats