CVE-2026-62297

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...