PT-2026-49834 · Undefined · Undefined

Published

2026-06-16

·

Updated

2026-06-16

·

CVE-2026-54626

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
we found two new critical vulnerabilities in SAIL, the image decoding library:
  • CVE-2026-54626 (TGA decoder)
  • CVE-2026-54627 (PSD decoder)
both heap out-of-bounds writes (CVSS 9.8).
responsibly disclosed and now fixed, thanks to the quick reaction of the maintainers.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-54626

Affected Products

Undefined