Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/04/20 7:22 p.m.•24 views

CVE-2026-40493

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/18 3:16 a.m.•29 views

CVE-2026-40493

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS0.00598EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/04/18 3:16 a.m.•23 views

DEBIAN-CVE-2026-40493

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/18 1:41 a.m.•61 views

CVE-2026-40493 SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS0.00598EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/18 1:41 a.m.•13 views

CVE-2026-40493

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/18 1:41 a.m.•62 views

CVE-2026-40493

SAIL PSD decoder in LAB mode (3 channels, 16-bit depth) suffers a heap buffer overflow due to a bpp mismatch: bytes-per-pixel is computed as (channelsdepth) but the allocated buffer uses the resolved pixel format (BPP40_CIE_LAB yields 5 bytes/pixel while 3 16 would imply 6). This causes every pix...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/18 1:41 a.m.•34 views

EUVD-2026-23646

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/18 1:41 a.m.•13 views

CVE-2026-40493 SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/04/18 1:41 a.m.•22 views

CVE-2026-40493 SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/18 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-40493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/18 12:00 a.m.•41 views

PT-2026-33586

Name of the Vulnerable Software and Affected Versions SAIL versions prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979 Description The PSD codec in this cross-platform image library for loading and saving images contains a heap buffer overflow when processing images in LAB mode. The issue...

9.8CVSS6.2AI score0.00598EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/18 12:00 a.m.•3 views

CVE-2026-40493: Out-of-bounds Write

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel bpp from raw header fields channels depth, but the pixel buffer is allocated base...

9.8CVSS6.3AI score0.00598EPSS
SaveExploits0References2
Rows per page
Query Builder