https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:28:31.176546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-22039 cnvd-2020-22039 2026-10-04T10:28:31.229582+00:00 cnvd-2020-22039 https://cve.radiocsirt.org/vuln/euvd-2026-39902 EUVD-2026-39902 2026-10-04T10:28:31.229634+00:00 EUVD-2026-39902 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10571 fkie_cve-2020-10571 2026-10-04T10:28:31.229652+00:00

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.

 https://cve.radiocsirt.org/vuln/ghsa-22jr-vc7j-g762 GHSA-22jr-vc7j-g762 — Potential buffer overflow in psd-tools 2026-10-04T10:28:31.229684+00:00

Affected: PyPI: psd-tools

### Impact An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malformed PSD input data during decoding to the PIL.Image or NumPy format, leading to a Buffer Overflow.

### Patches Users of psd-tools version v1.8.37 to v1.9.3 should upgrade to v1.9.4.

### Workarounds Without Cython present on installation, buffer overflow does not occur but IndexError will be thrown. However, already installed psd-tools with Cython extention should be upgraded.

### References https://github.com/psd-tools/psd-tools/pull/198

### For more information If you have any questions or comments about this advisory: * Open an issue in [psd-tools](https://github.com/psd-tools/psd-tools/issues)

 https://cve.radiocsirt.org/vuln/gsd-2020-10571 gsd-2020-10571 2026-10-04T10:28:31.229715+00:00 gsd-2020-10571 https://cve.radiocsirt.org/vuln/pysec-2020-91 PYSEC-2020-91 2026-10-04T10:28:31.229727+00:00

Affected: PyPI: psd-tools

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.