https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:24:51.061343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292095 EUVD-2026-292095 2026-10-08T19:24:51.063718+00:00 EUVD-2026-292095 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40493 fkie_cve-2026-40493 2026-10-08T19:24:51.063752+00:00

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel (`bpp`) from raw header fields `channels * depth`, but the pixel buffer is allocated based on the resolved pixel format. For LAB mode with `channels=3, depth=16`, `bpp = (3*16+7)/8 = 6`, but the format `BPP40_CIE_LAB` allocates only 5 bytes per pixel. Every pixel write overshoots, causing a deterministic heap buffer overflow on every row. Commit c930284445ea3ff94451ccd7a57c999eca3bc979 contains a patch.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40493 UBUNTU-CVE-2026-40493 2026-10-08T19:24:51.063787+00:00

Affected: Ubuntu:24.04:LTS: sail, Ubuntu:25.10: sail, Ubuntu:26.04:LTS: sail

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel (`bpp`) from raw header fields `channels * depth`, but the pixel buffer is allocated based on the resolved pixel format. For LAB mode with `channels=3, depth=16`, `bpp = (3*16+7)/8 = 6`, but the format `BPP40_CIE_LAB` allocates only 5 bytes per pixel. Every pixel write overshoots, causing a deterministic heap buffer overflow on every row. Commit c930284445ea3ff94451ccd7a57c999eca3bc979 contains a patch.