CVE-2020-10571: Potential buffer overflow in psd-tools
(updated )
An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malformed PSD input data during decoding to the PIL.Image or NumPy format, leading to a Buffer Overflow.
References
- github.com/advisories/GHSA-22jr-vc7j-g762
- github.com/psd-tools/psd-tools/commit/fd51f8b4a52bc9c1c06d1035dfdf2cd920e87074
- github.com/psd-tools/psd-tools/pull/198
- github.com/psd-tools/psd-tools/releases/tag/v1.9.4
- github.com/psd-tools/psd-tools/security/advisories/GHSA-22jr-vc7j-g762
- github.com/pypa/advisory-database/tree/main/vulns/psd-tools/PYSEC-2020-91.yaml
- nvd.nist.gov/vuln/detail/CVE-2020-10571
Code Behaviors & Features
Detect and mitigate CVE-2020-10571 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →