CVE-2025-53510: Integer Overflow
A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .psd file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based buffer to overflow when decoding the image which can lead to remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53510?
CVE-2025-53510 is classified as a high severity vulnerability due to its potential for causing memory corruption.
How do I fix CVE-2025-53510?
To mitigate CVE-2025-53510, update to a patched version of the SAIL Image Decoding Library as soon as it becomes available.
What types of attacks can exploit CVE-2025-53510?
CVE-2025-53510 can be exploited through specially crafted .psd files that trigger the integer overflow during decoding.
What software is affected by CVE-2025-53510?
CVE-2025-53510 specifically affects the SAIL Image Decoding Library version 0.9.8.
What are the potential consequences of exploiting CVE-2025-53510?
Exploiting CVE-2025-53510 may lead to heap-based buffer corruption, which can result in arbitrary code execution or system crashes.