Security Advisory

CVE-2025-53085

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-25 14:17:40
Last updated 2025-11-03 18:13:11
Assigner talos
State PUBLISHED

Description

A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .psd file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.