CVE catalog

CVE-2026-54627

DEBIAN-CVE-2026-54627

Severity: Unknown
Published: Sep 17, 2026, 8:16:52 PM UTC
Updated: Sep 24, 2026, 8:47:28 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.78% · Oct 25, 2026

SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c resolves a one-channel PSD in Bitmap color mode to SAIL_PIXEL_FORMAT_BPP1_INDEXED without requiring the file depth to be one, so the pixel buffer uses one-bit rows while sail_codec_load_frame_v8_psd() in src/sail-codecs/psd/psd.c accepts depth == 8 and writes one attacker-controlled byte per pixel. Loading a crafted PSD through sail_load_from_file() or sail_load_from_memory() therefore writes beyond each heap row, causing memory corruption, a reliable crash, or potential code execution. This mode/depth mismatch is distinct from GHSA-rcqx-gc76-r9mv and GHSA-wcj8-hxxf-pq2c. This issue is fixed in version 1.0.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	sail	13	`0.9.10-1`	vulnerable
Debian	sail	13	`0.9.10-2`	vulnerable
Debian	sail	13	`0.9.10-3`	vulnerable
Debian	sail	13	`0.9.8-1`	vulnerable
Debian	sail	13	`0.9.8-1+deb13u1`	vulnerable
Debian	sail	13	`0.9.9-1`	vulnerable
Debian	sail	13	`1.2.0-1`	vulnerable
Debian	sail	14	`0.9.10-1`	vulnerable
Debian	sail	14	`0.9.10-2`	vulnerable
Debian	sail	14	`0.9.10-3`	vulnerable
Debian	sail	14	`0.9.8-1`	vulnerable
Debian	sail	14	`0.9.9-1`	vulnerable
Debian	sail	14	`1.2.0-1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	sail	deb	14	`1.2.0-1`	Not reported	DEBIAN-CVE-2026-54627	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[libsail0t64]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[libsail-c++0t64]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[libsail-c++-dev]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[libsail-common0t64]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[libsail-common-dev]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[libsail-dev]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[libsail-manip0t64]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[libsail-manip-dev]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13
[sail-codecs]Affected
Source package: [sail]
Details (2)
- 0.9.8-1+deb13u1 · amd64 · trixie
  Affected
  pypi · sail · debian · 13
- 0.9.8-1+deb13u1 · arm64 · trixie
  Affected
  pypi · sail · debian · 13

Observed: Oct 23, 2026, 8:36:59 PM UTC

References

[https://osv.dev/vulnerability/DEBIAN-CVE-2026-54627]

[FIRST EPSS] · [OSV Package Vulnerability Database]