
Sigreturn Labs@sigreturn_labs
Patch
we found two new critical vulnerabilities in SAIL, the image decoding library: - CVE-2026-54626 (TGA decoder) - CVE-2026-54627 (PSD decoder) both heap out-of-bounds writes (CVSS 9.8). responsibly disclosed and now fixed, thanks to the quick reaction of the maintainers.
Post summary
Two critical heap out‑of‑bounds write vulnerabilities were found in the SAIL image decoding library and have been patched after responsible disclosure.
01064877
28 followersView on X
