EUVD-2026-116262

ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding totalMemoryLimit bypass...

CVE-2026-63501

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-63501

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-63501 ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-63501

The ag-psd JavaScript library for Photoshop Document files is vulnerable to uncontrolled memory allocation in the PSD layer decoding process. Prior to version 31.0.3 , the readPsd() function fails to correctly pass the totalMemoryLimit to decodeLayerImageData because it expects a differently name...

CVE-2026-63501 ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

Agamnentzar ag-psd resource management error vulnerability

Versions of Agamnentzar ag-psd prior to 31.0.1 contain a resource management error vulnerability. This arises because readPsd accepts a totalMemoryLimit parameter, while decodeLayerImageData expects a memoryLimit attribute with a different name. As a result, an undefined limit is passed to...

PT-2026-136374

Name of the Vulnerable Software and Affected Versions ag-psd versions prior to 31.0.3 Description The readPsd function accepts a totalMemoryLimit for parsing files, but the decodeLayerImageData function expects a property named memoryLimit. This discrepancy causes an undefined limit to be passed ...

CVE-2026-63501: Agamnentzar ag-psd: ag-psd is a JavaScript library for reading and writing Photoshop Document files

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2025-59472

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the "Next-Resume: 1" header and processes attacker-controlled postponed state data. Two closely relat...