CyberSecBulletin

HappySeaFox vulnerabilities

We track 7 vulnerabilities in HappySeaFox products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.

7vulnerabilities
6critical
1high
0exploited
9.5average CVSS score

Latest HappySeaFox vulnerabilities

  • 7.8 High severity

    sail: Incorrect Calculation of Buffer Size

    CVE-2026-54692HappySeaFox

    SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8_xbm() in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using the X11 one-byte-per-lit

  • 9.8 Critical severity

    sail: Heap-based Buffer Overflow

    CVE-2026-54627HappySeaFox

    SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c resolves a one-channel PSD in Bitmap color mode to SA

  • 9.8 Critical severity

    sail: Heap-based Buffer Overflow

    CVE-2026-54626HappySeaFox

    SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGA_INDEXED_RLE path selected by image_type == 9 allocates an image buffer using the one-byte-per-pixel SAIL_PIXEL

  • 9.8 Critical severity

    sail: Out-of-bounds Write

    CVE-2026-40494HappySeaFox

    SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302, the TGA codec's RLE decoder in `tga.c` has an asymmetric bounds check vulnerability

  • 9.8 Critical severity

    sail: Out-of-bounds Write

    CVE-2026-40493HappySeaFox

    SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes bytes-per-pixel (`bpp`) from raw header fields `channels * d

  • 9.8 Critical severity

    sail: Out-of-bounds Write

    CVE-2026-40492HappySeaFox

    SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02, the XWD codec resolves pixel format based on `pixmap_depth` but the byte-swap code

  • 9.8 Critical severity

    sail: Heap-based Buffer Overflow

    CVE-2026-27168HappySeaFox

    SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. All versions are vulnerable to Heap-based Buffer Overflow through the XWD parser's use of the bytes_per_line value. The value os read directl