SA
Product
sail
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 1Medium 1Low 0
Watch
Add sail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54627 | 9.8 | Sep 17 | SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth) Affected: < 1.0.0 |
| CVE-2026-54626 | 9.8 | Sep 17 | SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch) Affected: < 1.0.0 |
| CVE-2026-40494 | 9.8 | Apr 18 | SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check Affected: < 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302 |
| CVE-2026-40493 | 9.8 | Apr 18 | SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode Affected: < c930284445ea3ff94451ccd7a57c999eca3bc979 |
| CVE-2026-40492 | 9.8 | Apr 18 | SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap Affected: < 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02 |
| CVE-2026-27168 | 9.8 | Feb 20 | SAIL: Heap-based Buffer Overflow in Sail-codecs-xwd Affected: <= 0.9.10 |
| CVE-2026-54692 | 7.8 | Sep 17 | SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write) Affected: < 1.0.0 |
| CVE-2026-59959 New | 4.8 | Oct 28 | SAIL: WebP decoder division by zero through malformed animated canvas metadata Affected: < 1.0.2 |
Showing 8
