Skip to content
OpenAdvisories
High · 8.8 CVE-2018-3921 EUVD-2018-15707GHSA-g7fg-2mgf-5jhr

A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image p…

Published Aug 1, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and gain code execution.

Affected products

VendorProductAffectedFixed
Computerinsel Computerinsel Photoline Computerinsel Photoline 20.54 for OS X —

References