79 matches found
PT-2026-96971
Name of the Vulnerable Software and Affected Versions psd-tools versions prior to 1.17.4 Description An issue exists where the PSDImage.composite and PSDImage.numpy functions allocate output buffers based on geometry specified in the PSD header—including width, height, channels, depth, and...
Linux Distros Unpatched Vulnerability : CVE-2026-49836
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
DEBIAN-CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
UBUNTU-CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
agkit (0.27.0), aoirint-psdlayer2dirpy (>=20220819.1.0, <=20220819.2.0) +5 more potentially affected by CVE-2026-49836 via psd-tools (>=0.10.0, <=1.10.9)
psd-tools PYPI version =0.10.0, =20220819.1.0, =2.0.0, =0.8.0, =0.1.0, =0.5.1 - psdtojpg 0.1.0 Source cves: CVE-2026-49836 Source advisory: MEND:CVE-2026-49836...
CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
EUVD-2026-75804
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836
psd-tools (Python library for Adobe Photoshop PSD files) is vulnerable to arbitrary file write and arbitrary file read via unsanitized smart-object paths. In all releases through v1.17.0 , SmartObject.save() uses the embedded filename from the PSD verbatim—no basename, no .. filtering, no absolut...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, "SmartObject.save" writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836: Improper Limitation of a Pathname to a Restricted Directory
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
agkit (0.27.0), aoirint-psdlayer2dirpy (>=20220819.1.0, <=20220819.2.0) +4 more potentially affected by CVE-2026-49836 via psd-tools (>=1.4.0, <=1.10.9)
psd-tools PYPI version =1.4.0, =20220819.1.0, =2.0.0, =0.8.0, =0.1.0, =0.5.1 Source cves: CVE-2026-49836 Source advisory: OSV:PYSEC-2026-2969...
psd-tools vulnerable to arbitrary file write via smart-object filename
psd-tools: arbitrary file write/read via smart-object path traversal SummaryIn psd-tools all releases exposing the SmartObject API through v1.17.0, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised...
psdtojpg (0.1.0) potentially affected by CVE-2026-49836 via psd-tools (0.10.0)
psd-tools PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on psd-tools and may be impacted: - psdtojpg 0.1.0 Source cves: CVE-2026-49836 Source advisory: OSV:PYSEC-2026-2969...
PYSEC-2026-2969 psd-tools vulnerable to arbitrary file write via smart-object filename
psd-tools: arbitrary file write/read via smart-object path traversal Summary In psd-tools all releases exposing the SmartObject API through v1.17.0, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitise...
Path Traversal
psd-tools is vulnerable to Path Traversal. The vulnerability is due to improper validation and sanitization of attacker-controlled file paths in the SmartObject.save and SmartObject.open APIs, which allows an attacker to write arbitrary files to attacker-chosen locations outside the intended...
