CVE-2026-54627Patch

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-16: 1Patch / Workaround · 2026-06-16: 1Technical Details · 2026-06-16: 106-16
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Sigreturn Labs@sigreturn_labs
    Patch

    we found two new critical vulnerabilities in SAIL, the image decoding library: - CVE-2026-54626 (TGA decoder) - CVE-2026-54627 (PSD decoder) both heap out-of-bounds writes (CVSS 9.8). responsibly disclosed and now fixed, thanks to the quick reaction of the maintainers.

    Post summary

    Two critical heap out‑of‑bounds write vulnerabilities were found in the SAIL image decoding library and have been patched after responsible disclosure.

    01064877
    28 followersView on X

Explore more