CyberSecBulletin

Psd-tools vulnerabilities

We track 2 vulnerabilities in Psd-tools products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2026.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Psd-tools vulnerabilities

  • 7.5 High severity

    psd-tools: Memory Allocation with Excessive Size Value

    CVE-2026-59991Psd-tools

    psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer

  • 9.1 Critical severity

    psd-tools: Integer Overflow or Wraparound

    CVE-2026-27809Psd-tools

    psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data (e.g. a literal run that extends past the expected row size), decode_rle() raises ValueError which p