HIGH
HappySeaFox
CVE published 2026-09-17
CVE-2026-54692
A vulnerability in the SAIL cross-platform library for loading and saving images can cause a heap overwrite when loading certain XBM files, potentially leading to process state corruption, crashes, or code execution in susceptible consuming applications. This issue arises from the sail_codec_load_frame_v8_xbm() function in src/sail-codecs/xbm/xbm.c, which incorrectly allocates a decoded pixel buffer using [truncated]