CVE-2026-59991

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those values against the available file data. A tiny crafted PSD could therefore cause multi-gigabyte memory allocation, and PSDImage.composite() could return a black image with only a warning instead of raising an exception. Services that composite untrusted PSD files could be terminated by out-of-memory handling. This issue is fixed in version 1.17.4.

• CWE-789

• https://github.com/psd-tools/psd-tools/commit/a3d9a53ad51e667b5772a4f636ca6f2e16f4b271
• https://github.com/psd-tools/psd-tools/releases/tag/v1.17.4
• https://github.com/psd-tools/psd-tools/security/advisories/GHSA-8q6g-vjhf-jp8m
• https://github.com/psd-tools/psd-tools/security/advisories/GHSA-8q6g-vjhf-jp8m

Published

Sep 22, 2026

Last Modified

Sep 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59983OpenEXR is the reference implementation and specification fo…5.5
• CVE-2026-59984OpenEXR is the reference implementation and specification fo…5.5
• CVE-2026-59985OpenEXR is the reference implementation and specification fo…5.5
• CVE-2026-59989Phalcon is a high-performance, full-stack PHP framework. In …9.2
• CVE-2026-5999A vulnerability has been found in JeecgBoot up to 3.9.1. Thi…6.3
• CVE-2026-59990Jawn is an open source JSON parser. Prior to 1.7.0, Jawn par…7.5
• CVE-2026-59992Tina is a headless content management system. Prior to next-…5.4
• CVE-2026-59995sftp in OpenSSH before 10.4 does not properly constrain the …5.4
• CVE-2026-59996scp in OpenSSH before 10.4 may place a file in the parent di…5.4
• CVE-2026-59997internal-sftp in sshd in OpenSSH before 10.4 recognizes only…5.4
• CVE-2026-59998sshd in OpenSSH before 10.4 has an undocumented security-rel…6.5
• CVE-2026-59999In sshd in OpenSSH before 10.4, DisableForwarding=yes was su…7.5