CVE-2020-10571

CRITICAL

psd-tools < 1.9.4 - Denial of Service via RLE Decoding

Title source: llm
STIX 2.1

Description

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.

References (2)

Core 2
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/psd-tools/psd-tools/pull/198
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/psd-tools/psd-tools/releases/tag/v1.9.4

Scores

CVSS v3 9.8
EPSS 0.0174
EPSS Percentile 74.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-754
Status published
Products (2)
psd-tools_project/psd-tools < 1.9.4
pypi/psd-tools 1.8.37 - 1.9.4PyPI
Published Mar 14, 2020
Tracked Since Feb 18, 2026