CVE-2026-40492

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02, the XWD codec resolves pixel format based on `pixmap_depth` but the byte-swap code uses `bits_per_pixel` independently. When `pixmap_depth=8` (BPP8_INDEXED, 1 byte/pixel buffer) but `bits_per_pixel=32`, the byte-swap loop accesses memory as `uint32_t*`, reading/writing 4x the allocated buffer size. This is a different vulnerability from the previously reported GHSA-3g38-x2pj-mv55 (CVE-2026-27168), which addressed `bytes_per_line` validation. Commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02 contains a patch.

• CWE-787

• https://github.com/HappySeaFox/sail/commit/36aa5c7ec8a2bb35f6fb867a1177a6f141156b02
• https://github.com/HappySeaFox/sail/security/advisories/GHSA-526v-vm72-4v64
• https://github.com/HappySeaFox/sail/security/advisories/GHSA-526v-vm72-4v64

Published

Apr 18, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40487Postiz is an AI social media scheduling tool. Prior to versi…9
• CVE-2026-40488Magento Long Term Support (LTS) is an unofficial, community-…8.8
• CVE-2026-40489editorconfig-core-c is an EditorConfig core library for use…8.6
• CVE-2026-4049Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-40490The AsyncHttpClient (AHC) library allows Java applications t…6.8
• CVE-2026-40491gdown is a Google Drive public file/folder downloader. Versi…7.8
• CVE-2026-40493SAIL is a cross-platform library for loading and saving imag…9.8
• CVE-2026-40494SAIL is a cross-platform library for loading and saving imag…9.8
• CVE-2026-40495FOSSBilling is a free, open-source billing and client manage…6.9
• CVE-2026-40496FreeScout is a free self-hosted help desk and shared mailbox…9.1
• CVE-2026-40497FreeScout is a free self-hosted help desk and shared mailbox…8.1
• CVE-2026-40498FreeScout is a free self-hosted help desk and shared mailbox…9.8