Lucene search
+L

1195 matches found

NVD
NVD
added 2026/02/26 12:16 a.m.12 views

CVE-2026-27809

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data e.g. a literal run that extends past the expected row size, decoderle raises ValueError which propagated all the way to the user, crashin...

9.1CVSS0.0041EPSS
SaveExploits1References3
OSV
OSV
added 2026/02/26 12:16 a.m.7 views

UBUNTU-CVE-2026-27809

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data e.g. a literal run that extends past the expected row size, decoderle raises ValueError which propagated all the way to the user, crashin...

9.1CVSS5.8AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/26 12:0 a.m.15 views

psd-tools 安全漏洞

psd-tools is an open-source Python package designed for reading Adobe Photoshop PSD files. Versions of psd-tools prior to 1.12.2 contained security vulnerabilities. These vulnerabilities occurred due to the lack of handling of ValueError exceptions when processing PSD files containing...

9.1CVSS5.8AI score0.0041EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2026/02/26 12:0 a.m.8 views

CVE-2026-27809

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data e.g. a literal run that extends past the expected row size, decoderle raises ValueError which propagated all the way to the user, crashin...

9.1CVSS5.9AI score0.0041EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:0 a.m.6 views

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:0604-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0604-1 advisory. - CVE-2026-2272: integer overflow in ICO file handling can lead to a heap buffer overflow...

6.5CVSS7.4AI score0.00838EPSS
SaveExploits3References10
ATTACKERKB
ATTACKERKB
added 2026/02/25 11:57 p.m.6 views

CVE-2026-27809

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data e.g. a literal run that extends past the expected row size, decoderle raises ValueError which propagated all the way to the user, crashin...

9.1CVSS5.4AI score0.0041EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/25 11:57 p.m.5 views

CVE-2026-27809 psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data e.g. a literal run that extends past the expected row size, decoderle raises ValueError which propagated all the way to the user, crashin...

8.8CVSS5.9AI score0.0041EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/02/25 11:57 p.m.32 views

CVE-2026-27809 psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data e.g. a literal run that extends past the expected row size, decoderle raises ValueError which propagated all the way to the user, crashin...

8.8CVSS0.0041EPSS
SaveExploits1References3
CVE
CVE
added 2026/02/25 11:57 p.m.37 views

CVE-2026-27809

psd-tools (Python) prior to v1.12.2 is vulnerable when parsing PSD files with malformed RLE-compressed image data: decode_rle() can raise ValueError that was not caught, causing psd.composite() and psd-tools export to crash. The fix in v1.12.2 wraps the decode_rle() call in a try/except so that t...

9.1CVSS5.4AI score0.0041EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/02/25 11:57 p.m.10 views

CVE-2026-27809 psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data e.g. a literal run that extends past the expected row size, decoderle raises ValueError which propagated all the way to the user, crashin...

8.8CVSS5.6AI score0.0041EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/25 3:20 p.m.6 views

GHSA-273H-M46V-96Q4 ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds

An integer overflow in the PSB PSD v2 RLE decoding path causes a heap out-of-bounds read on 32-bit builds. This can lead to information disclosure or a crash when processing crafted PSB files. ================================================================= ==3298==ERROR: AddressSanitizer:...

3.7CVSS5.6AI score0.00236EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/02/25 3:20 p.m.6 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References3
OSV
OSV
added 2026/02/25 10:52 a.m.3 views

OPENSUSE-SU-2026:20275-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-2239: Fixed a heap buffer overflow in psd-util.c bsc1257959...

6.5CVSS6AI score0.00485EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2026/02/25 12:25 a.m.6 views

SUSE CVE-2026-24481

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD Adobe Photoshop format handler. When processing a maliciously crafted PSD file containin...

7.5CVSS5.8AI score0.00348EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/02/25 12:0 a.m.9 views

PT-2026-22058

Name of the Vulnerable Software and Affected Versions psd-tools versions prior to 1.12.2 Description psd-tools, a Python package for working with Adobe Photoshop PSD files, contains multiple issues. A lack of a length cap on zlib.decompress can lead to denial-of-service or out-of-memory crashes...

9.1CVSS5.9AI score0.0041EPSS
SaveExploits1References14
Tenable Nessus
Tenable Nessus
added 2026/02/25 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-24481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information...

7.5CVSS7.2AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:27 p.m.5 views

Out-of-bounds Read

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:27 p.m.5 views

Out-of-bounds Read

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:27 p.m.7 views

Out-of-bounds Read

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 3:27 p.m.7 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

8.7CVSS6AI score0.00348EPSS
SaveExploits0References2
Rows per page
Query Builder