TI-2026-39458 CVE-2026-54627
SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)
Priority HIGH 82
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.
HappySeaFox
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
HappySeaFox records in CISA KEVNo HappySeaFox vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-39457 CVE-2026-54626
SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)
Priority HIGH 82
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.
TI-2026-29245 CVE-2026-40494
SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check
Priority HIGH 82
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.
TI-2026-29244 CVE-2026-40493
SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode
Priority HIGH 82
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.
TI-2026-29243 CVE-2026-40492
SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap
Priority HIGH 82
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.
TI-2026-39513 CVE-2026-54692
SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)
Priority HIGH 69
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.
Priority MEDIUM 55
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.