CVE-2026-54627

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c resolves a one-channel PSD in Bitmap color mode to SAIL_PIXEL_FORMAT_BPP1_INDEXED without requiring the file depth to be one, so the pixel buffer uses one-bit rows while sail_codec_load_frame_v8_psd() in src/sail-codecs/psd/psd.c accepts depth == 8 and writes one attacker-controlled byte per pixel. Loading a crafted PSD through sail_load_from_file() or sail_load_from_memory() therefore writes beyond each heap row, causing memory corruption, a reliable crash, or potential code execution. This mode/depth mismatch is distinct from GHSA-rcqx-gc76-r9mv and GHSA-wcj8-hxxf-pq2c. This issue is fixed in version 1.0.0.

• CWE-122
• CWE-787

• https://github.com/HappySeaFox/sail/commit/f44a8b779a1fc527fc6bc5caa71a66a8ed940d50
• https://github.com/HappySeaFox/sail/releases/tag/v1.0.0
• https://github.com/HappySeaFox/sail/security/advisories/GHSA-ccqf-rv86-h3wm
• https://github.com/HappySeaFox/sail/security/advisories/GHSA-ccqf-rv86-h3wm

Published

Sep 17, 2026

Last Modified

Sep 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54621datamodel-code-generator generates Python data models from s…7.8
• CVE-2026-54622django CMS is an easy-to-use and developer-friendly enterpri…6.5
• CVE-2026-54623django CMS is an easy-to-use and developer-friendly enterpri…7.1
• CVE-2026-54624django CMS is an easy-to-use and developer-friendly enterpri…6.5
• CVE-2026-54625django CMS is a content management system powered by Django.…4.8
• CVE-2026-54626SAIL is a cross-platform library for loading and saving imag…9.8
• CVE-2026-54628Anyquery is an SQL query engine built on top of SQLite. Prio…8.6
• CVE-2026-54629Anyquery is an SQL query engine built on top of SQLite. Prio…7.5
• CVE-2026-5463Command injection vulnerability in console.run_module_with_o…9.8
• CVE-2026-54632SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NE…7.5
• CVE-2026-54633PoDoFo is a C++17 PDF manipulation library. From version 1.0…6.9
• CVE-2026-54634Hamlib is a ham radio control library for radios, rotators, …7.3