<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sail</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-27168: SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC p</title><link>https://patchthecve.com/cve/CVE-2026-27168.html</link><guid>https://patchthecve.com/cve/CVE-2026-27168.html</guid><pubDate>Wed, 17 Jun 2026 10:26:47 +0000</pubDate><description>HIGH 8.8: SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser&#x27;s use of the bytes_per_line value. The value os read directly from the file as the read size in io-&gt;</description></item><item><title>CVE-2025-53510: A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Li</title><link>https://patchthecve.com/cve/CVE-2025-53510.html</link><guid>https://patchthecve.com/cve/CVE-2025-53510.html</guid><pubDate>Wed, 17 Jun 2026 09:38:21 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .psd file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer t</description></item><item><title>CVE-2025-53085: A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Libr</title><link>https://patchthecve.com/cve/CVE-2025-53085.html</link><guid>https://patchthecve.com/cve/CVE-2025-53085.html</guid><pubDate>Wed, 17 Jun 2026 09:37:36 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .psd file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to conv</description></item><item><title>CVE-2025-52930: A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Li</title><link>https://patchthecve.com/cve/CVE-2025-52930.html</link><guid>https://patchthecve.com/cve/CVE-2025-52930.html</guid><pubDate>Wed, 17 Jun 2026 09:37:17 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .bmp file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to co</description></item><item><title>CVE-2025-52456: A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding L</title><link>https://patchthecve.com/cve/CVE-2025-52456.html</link><guid>https://patchthecve.com/cve/CVE-2025-52456.html</guid><pubDate>Wed, 17 Jun 2026 09:36:31 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .webp animation an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based bu</description></item><item><title>CVE-2025-50129: A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Li</title><link>https://patchthecve.com/cve/CVE-2025-50129.html</link><guid>https://patchthecve.com/cve/CVE-2025-50129.html</guid><pubDate>Wed, 17 Jun 2026 09:34:41 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .tga file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convinc</description></item><item><title>CVE-2025-46407: A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decodin</title><link>https://patchthecve.com/cve/CVE-2025-46407.html</link><guid>https://patchthecve.com/cve/CVE-2025-46407.html</guid><pubDate>Wed, 17 Jun 2026 09:26:21 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the imag</description></item><item><title>CVE-2025-35984: A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Li</title><link>https://patchthecve.com/cve/CVE-2025-35984.html</link><guid>https://patchthecve.com/cve/CVE-2025-35984.html</guid><pubDate>Wed, 17 Jun 2026 09:14:20 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .pcx file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convinc</description></item><item><title>CVE-2025-32468: A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding </title><link>https://patchthecve.com/cve/CVE-2025-32468.html</link><guid>https://patchthecve.com/cve/CVE-2025-32468.html</guid><pubDate>Wed, 17 Jun 2026 09:12:02 +0000</pubDate><description>HIGH 8.8: A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer</description></item></channel></rss>