SA
Product
sail
by HappySeaFox · last CVE Oct 28, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 1Medium 1Low 0
Watch

Add sail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54627
9.8
1%
Sep 17
SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)
Affected: < 1.0.0
CVE-2026-54626
9.8
1%
Sep 17
SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)
Affected: < 1.0.0
CVE-2026-40494
9.8
0%
Apr 18
SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check
Affected: < 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302
CVE-2026-40493
9.8
0%
Apr 18
SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode
Affected: < c930284445ea3ff94451ccd7a57c999eca3bc979
CVE-2026-40492
9.8
0%
Apr 18
SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap
Affected: < 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02
CVE-2026-27168
9.8
0%
Feb 20
SAIL: Heap-based Buffer Overflow in Sail-codecs-xwd
Affected: <= 0.9.10
CVE-2026-54692
7.8
0%
Sep 17
SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)
Affected: < 1.0.0
CVE-2026-59959
New
4.8–Oct 28
SAIL: WebP decoder division by zero through malformed animated canvas metadata
Affected: < 1.0.2
Showing 8