<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: happyseafox-sail</title><description>Every new CVE for happyseafox-sail.</description><link>https://agentprime.io/</link><item><title>CVE-2026-59959: SAIL: WebP decoder division by zero through malformed animated canvas metadata</title><link>https://agentprime.io/advisories/CVE-2026-59959/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59959/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 13:17:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54692: SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)</title><link>https://agentprime.io/advisories/CVE-2026-54692/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54692/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 19:47:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-54627: SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)</title><link>https://agentprime.io/advisories/CVE-2026-54627/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54627/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 19:47:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-54626: SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)</title><link>https://agentprime.io/advisories/CVE-2026-54626/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-54626/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 19:46:20 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-40494: SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check</title><link>https://agentprime.io/advisories/CVE-2026-40494/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40494/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Apr 2026 01:42:48 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-40493: SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode</title><link>https://agentprime.io/advisories/CVE-2026-40493/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40493/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Apr 2026 01:41:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-40492: SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap</title><link>https://agentprime.io/advisories/CVE-2026-40492/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40492/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Apr 2026 01:39:48 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-27168: SAIL: Heap-based Buffer Overflow in Sail-codecs-xwd</title><link>https://agentprime.io/advisories/CVE-2026-27168/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27168/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Feb 2026 23:34:54 GMT</pubDate><category>CVE</category></item></channel></rss>