Squirrel Abstract Image Library (SAIL) 0.9.8
Approved changes feed: RSS · Atom
cpe:2.3:a:sail:sail:0.9.8:*:*:*:*:*:*:*part: a version: 0.9.8 update: *
| Vendor | Sail (da95a9e4-2ec9-5a89-8b8e-fb7a724202d2) |
|---|---|
| Product | Sail (d132b994-3f38-57d3-a877-b1c5b016f540) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-53510 |
vulnerable | 2026-06-08 07:31:14.646339 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .psd file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:41.763Z
Updated: 2025-11-03T18:13:13.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53085 |
vulnerable | 2026-06-08 07:31:13.927211 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .psd file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:40.119Z
Updated: 2025-11-03T18:13:11.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52930 |
vulnerable | 2026-06-08 07:31:13.197016 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .bmp file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:36.760Z
Updated: 2025-11-03T18:13:08.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52456 |
vulnerable | 2026-06-08 07:31:11.614966 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .webp animation an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:35.230Z
Updated: 2025-11-03T18:13:04.538Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50129 |
vulnerable | 2026-06-08 07:31:10.481764 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .tga file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:38.509Z
Updated: 2025-11-03T18:13:02.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46407 |
vulnerable | 2026-06-08 07:27:08.182780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35984 |
vulnerable | 2026-06-08 07:21:00.208361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32468 |
vulnerable | 2026-06-08 07:19:00.137034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.