Sail Image Decoding Library
Approved changes feed: RSS · Atom
cpe:2.3:a:sail_image_decoding_library:sail_image_decoding_library:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sail Image Decoding Library (7e7034a4-8d2a-54f1-8aca-b92f1396ff80) |
|---|---|
| Product | Sail Image Decoding Library (d8b1c9cf-a95e-50cf-ad6d-db6e977a2096) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-53510 |
vulnerable | 2026-06-08 07:31:14.646307 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .psd file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:41.763Z
Updated: 2025-11-03T18:13:13.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53085 |
vulnerable | 2026-06-08 07:31:13.927093 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .psd file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:40.119Z
Updated: 2025-11-03T18:13:11.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52930 |
vulnerable | 2026-06-08 07:31:13.196840 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .bmp file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:36.760Z
Updated: 2025-11-03T18:13:08.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52456 |
vulnerable | 2026-06-08 07:31:11.614936 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .webp animation an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:35.230Z
Updated: 2025-11-03T18:13:04.538Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50129 |
vulnerable | 2026-06-08 07:31:10.480889 |
Details available
HIGH (8.8)
A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .tga file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Published: 2025-08-25T14:17:38.509Z
Updated: 2025-11-03T18:13:02.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46407 |
vulnerable | 2026-06-08 07:27:08.181721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35984 |
vulnerable | 2026-06-08 07:21:00.207482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32468 |
vulnerable | 2026-06-08 07:19:00.136358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.