Skip to content
OpenAdvisories

Vendor

Agamnentzar

2 known vulnerabilities.

Products

ag-psd 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-63501

    ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

    ag-psd is a JavaScript library for reading and writing Photoshop Document files. Prior to 31.0.3, readPsd() accepts a totalMemoryLimit for parsing untrusted PSD files, but decodeLayerImageData expects a differently named memoryLimit property and therefore pas…

    Agamnentzar ag-psd ag-psd npm
  • High 7.5
    CVE-2026-62297

    ag-psd has uncontrolled memory allocation via declared PSD dimensions (DoS)

    ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit remediation attempt in version 31.0.0, `readPsd()` commits image and layer buffers from attacker-declared PSD geometry before validating the declarati…

    Agamnentzar ag-psd