CVE-2026-26246 Memory Exhaustion via Malformed PSD File Upload

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to bound memory allocation when processing PSD image files which allows an authenticated attacker to cause server memory exhaustion and denial of service via uploading a specially crafted PSD file. Mattermost Advisory I...

PT-2026-26457

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the parsing of PSD files due to insufficient validation of user-supplied data, leading to an integer overflow before buffer allocation. This can allow a remote attacker to execu...

psd-tools 安全漏洞

psd-tools is an open-source Python package designed for reading Adobe Photoshop PSD files. Versions of psd-tools prior to 1.12.2 contained security vulnerabilities. These vulnerabilities occurred due to the lack of handling of ValueError exceptions when processing PSD files containing...

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Security update for gimp

This update for gimp fixes the following issues: CVE-2026-2272: integer overflow in ICO file handling can lead to a heap buffer overflow bsc1258000. CVE-2026-2271: integer overflow in the PSP file parser can lead to a heap buffer overflow bsc1257999. CVE-2026-2239: missing null terminator when...

EUVD-2026-7460

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD Adobe Photoshop format handler. When processing a maliciously crafted PSD file containin...

CVE-2020-23888

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted psd file...

CVE-2025-65803

An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service DoS via supplying a crafted PSD file...

CVE-2025-65803

CVE-2025-65803 affects the FreeImage project (v3.18.0 and earlier). The root cause is an integer overflow in psdParser::ReadImageData, enabling a Denial of Service via a crafted PSD file. Connected sources (Red Hat, NVD, Debian, Ubuntu, OSV, Debian, CN) confirm the same description and identify F...

EUVD-2016-8378

Malware in sbrugna...

EUVD-2020-16625

Malware in sbrugna...

EUVD-2020-13828

Malware in sbrugna...

EUVD-2005-0762

Malware in sbrugna...

EUVD-2014-9630

Malware in sbrugna...

EUVD-2017-12027

Malware in sbrugna...

EUVD-2013-5205

Malware in sbrugna...

EUVD-2020-29723

Malware in sbrugna...

EUVD-2017-14614

Malware in sbrugna...

EUVD-2020-9357

Malware in sbrugna...

EUVD-2016-8367

Malware in sbrugna...