{"id":27715,"date":"2026-09-23T04:31:14","date_gmt":"2026-09-22T20:31:14","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-59991"},"modified":"2026-09-23T04:31:14","modified_gmt":"2026-09-22T20:31:14","slug":"cve-2026-59991","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-59991","title":{"rendered":"CVE-2026-59991 [HIGH] &#8211; psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4,"},"content":{"rendered":"<p>psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those values against the available file data. A tiny crafted PSD could therefore cause multi-gigabyte memory allocation, and PSDImage.composite() could return a black image with only a warning instead of raising an exception. Services that composite untrusted PSD files could be terminated by out-of-memory handling. This issue is fixed in version 1.17.4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controlled PSD header geomet<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-27715","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/27715","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=27715"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=27715"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=27715"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}