CVE-2026-62297

The ag-psd JavaScript library for Photoshop Document files is vulnerable to a denial of service (DoS) due to uncontrolled memory allocation. The psdReader.js implementation's readPsd() function sizes off-heap typed arrays using width, height, channels, depth, and per-layer rectangles before valid...

CVE-2026-62297: Agamnentzar ag-psd: ag-psd is a JavaScript library for reading and writing Photoshop Document files

ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, readPsd commits image and layer buffers from attacker-declared PSD geometry before validating the declarations against the actual available data or...