CVE-2025-53085: Buffer Overflow

Published Aug 25, 2025

Updated

A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .psd file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.

Affected Software

2 affected components

SAIL Image Decoding Library

SAIL SAIL=0.9.8

Event History

Aug 25, 2025

CVE Published

via MITRE·02:17 PM

Data Sourced

via MITRE·02:17 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-53085?

CVE-2025-53085 is considered a high severity vulnerability due to its potential for remote code execution.

How can CVE-2025-53085 be exploited?

CVE-2025-53085 can be exploited by attackers through specially crafted .psd files that trigger a heap-based buffer overflow.

What software versions are affected by CVE-2025-53085?

CVE-2025-53085 affects SAIL Image Decoding Library version 0.9.8.

How do I fix CVE-2025-53085?

To fix CVE-2025-53085, upgrade the SAIL Image Decoding Library to the latest version that addresses the vulnerability.

What are the consequences of CVE-2025-53085?

The consequences of CVE-2025-53085 include potential remote code execution, leading to unauthorized access or control over the affected system.