Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/11/09 9:08 p.m.•4 views

ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

Summary The readPsd function in ag-psd accepts a totalMemoryLimit option to cap memory usage when parsing untrusted PSD files, but this limit is never forwarded to the layer image buffer allocation path. A property name mismatch totalMemoryLimit vs. memoryLimit causes the size guard inside...

7.5CVSS6.3AI score0.0051EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder