Advisories · Technology
HappySeaFox sail.
Every CVE that names HappySeaFox sail among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
SAIL: WebP decoder division by zero through malformed animated canvas metadata
- HappySeaFox sail
- Denial of service
- CVSS 7.8 High
SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)
- HappySeaFox sail
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)
- HappySeaFox sail
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)
- HappySeaFox sail
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check
- HappySeaFox sail
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode
- HappySeaFox sail
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap
- HappySeaFox sail
- Memory corruption
- CVSS 8.8 High
SAIL: Heap-based Buffer Overflow in Sail-codecs-xwd
- HappySeaFox sail
- Memory corruption