6 matches found
ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)
Summary The readPsd function in ag-psd accepts a totalMemoryLimit option to cap memory usage when parsing untrusted PSD files, but this limit is never forwarded to the layer image buffer allocation path. A property name mismatch totalMemoryLimit vs. memoryLimit causes the size guard inside...
7.5CVSS6.3AI score0.0051EPSS
SaveExploits0References5Affected Software1
20