PT-2026-49835 · Undefined · Undefined

Published

2026-06-16

·

Updated

2026-06-16

·

CVE-2026-54627

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
we found two new critical vulnerabilities in SAIL, the image decoding library:
  • CVE-2026-54626 (TGA decoder)
  • CVE-2026-54627 (PSD decoder)
both heap out-of-bounds writes (CVSS 9.8).
responsibly disclosed and now fixed, thanks to the quick reaction of the maintainers.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-54627

Affected Products

Undefined