ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

Summary The readPsd function in ag-psd accepts a totalMemoryLimit option to cap memory usage when parsing untrusted PSD files, but this limit is never forwarded to the layer image buffer allocation path. A property name mismatch totalMemoryLimit vs. memoryLimit causes the size guard inside...

GHSA-6W3R-6HPR-HP6P ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

Summary The readPsd function in ag-psd accepts a totalMemoryLimit option to cap memory usage when parsing untrusted PSD files, but this limit is never forwarded to the layer image buffer allocation path. A property name mismatch totalMemoryLimit vs. memoryLimit causes the size guard inside...

EUVD-2026-116262

ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding totalMemoryLimit bypass...

CVE-2026-63501

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-63501

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-63501 ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-63501

The ag-psd JavaScript library for Photoshop Document files is vulnerable to uncontrolled memory allocation in the PSD layer decoding process. Prior to version 31.0.3 , the readPsd() function fails to correctly pass the totalMemoryLimit to decodeLayerImageData because it expects a differently name...

CVE-2026-63501 ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

Agamnentzar ag-psd resource management error vulnerability

Versions of Agamnentzar ag-psd prior to 31.0.1 contain a resource management error vulnerability. This arises because readPsd accepts a totalMemoryLimit parameter, while decodeLayerImageData expects a memoryLimit attribute with a different name. As a result, an undefined limit is passed to...

PT-2026-136374

Name of the Vulnerable Software and Affected Versions ag-psd versions prior to 31.0.3 Description The readPsd function accepts a totalMemoryLimit for parsing files, but the decodeLayerImageData function expects a property named memoryLimit. This discrepancy causes an undefined limit to be passed ...

CVE-2026-63501: Agamnentzar ag-psd: ag-psd is a JavaScript library for reading and writing Photoshop Document files

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore passes an undefined limit to...

CVE-2026-62297 ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...

CVE-2026-62297 ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...

EUVD-2026-114472

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...

CVE-2026-62297

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, "readPsd" commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...

CVE-2026-62297

The ag-psd JavaScript library for Photoshop Document files is vulnerable to a denial of service (DoS) due to uncontrolled memory allocation. The psdReader.js implementation's readPsd() function sizes off-heap typed arrays using width, height, channels, depth, and per-layer rectangles before valid...

CVE-2026-62297 ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...

CVE-2026-62297: Agamnentzar ag-psd: ag-psd is a JavaScript library for reading and writing Photoshop Document files

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...

PT-2026-134203

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...