Critical · 9.8 CVE-2020-10571 EUVD-2020-0150GHSA-22jr-vc7j-g762PYSEC-2020-91

Potential buffer overflow in psd-tools

Published Mar 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.

Ecosystem	Package	Affected	Fixed	Record
PyPI	psd-tools	>= 1.8.37, < 1.9.4	1.9.4	GHSA-22jr-vc7j-g762
PyPI	psd-tools	< 1.9.4	1.9.4	PYSEC-2020-91