PT-2026-33586 · Sail · Sail

CVE-2026-40493 · Published 2026-04-18 · Updated 2026-04-20

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAIL versions prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979

Description The PSD codec in this cross-platform image library for loading and saving images contains a heap buffer overflow when processing images in LAB mode. The issue occurs because the bytes-per-pixel bpp is computed from raw header fields channels * depth, while the pixel buffer is allocated based on the resolved pixel format. Specifically, for LAB mode with channels=3 and depth=16, the bpp is calculated as 6, but the BPP40 CIE LAB format allocates only 5 bytes per pixel, leading to a deterministic overflow during pixel writes on every row.

Recommendations Update to the version containing commit c930284445ea3ff94451ccd7a57c999eca3bc979.

Exploit

Fix

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-40493

GHSA-RCQX-GC76-R9MV

Affected Products

Sail

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40493.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-40493 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40493 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-40493 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40493 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-40493 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-40493 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-40493 · Vendor Advisory
• https://github.com/HappySeaFox/sail/security/advisories/GHSA-rcqx-gc76-r9mv · Note
• https://github.com/HappySeaFox/sail/commit/c930284445ea3ff94451ccd7a57c999eca3bc979 · Note
• https://twitter.com/0dayPublishing/status/2046267676050214999 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045406517008953603 · Twitter Post
• https://twitter.com/CVEnew/status/2045467326779138338 · Twitter Post
• https://twitter.com/TuringCyberObs/status/2046161612059382058 · Twitter Post
• https://twitter.com/PurpleOps_io/status/2045889307081109913 · Twitter Post