{"id":"UBUNTU-CVE-2026-59991","details":"psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels, depth, and per-layer rectangles, before validating those values against the available file data. A tiny crafted PSD could therefore cause multi-gigabyte memory allocation, and PSDImage.composite() could return a black image with only a warning instead of raising an exception. Services that composite untrusted PSD files could be terminated by out-of-memory handling. This issue is fixed in version 1.17.4.","modified":"2026-09-24T02:00:30.908739567Z","published":"2026-09-22T20:17:00Z","upstream":["CVE-2026-59991"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-59991"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-59991"},{"type":"REPORT","url":"https://github.com/psd-tools/psd-tools/commit/a3d9a53ad51e667b5772a4f636ca6f2e16f4b271"},{"type":"REPORT","url":"https://github.com/psd-tools/psd-tools/releases/tag/v1.17.4"},{"type":"REPORT","url":"https://github.com/psd-tools/psd-tools/security/advisories/GHSA-8q6g-vjhf-jp8m"}],"affected":[{"package":{"name":"psd-tools","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/psd-tools?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.28+dfsg.1-1","1.9.28+dfsg.1-1build1","1.9.30+dfsg.1-1","1.9.30+dfsg.1-1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"python3-psd-tools","binary_version":"1.9.30+dfsg.1-1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-59991.json"}},{"package":{"name":"psd-tools","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/psd-tools?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.7+dfsg.1-1","1.10.7+dfsg.1-1build1","1.10.9+dfsg.1-1","1.12.0+dfsg.1-1","1.12.1+dfsg.1-1"],"ecosystem_specific":{"binaries":[{"binary_name":"python3-psd-tools","binary_version":"1.12.1+dfsg.1-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-59991.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}