CVE-2025-50129
A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image da...
Original description
The description as published by the source.
A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .tga file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to convince the library to read a file to trigger this vulnerability.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-50129 sail Fixed in: 0.9.8-1+deb13u1
- Ubuntu UBUNTU-CVE-2025-50129 sail
References
- advisory github.com
- advisory nvd.nist.gov
- web talosintelligence.com
- web talosintelligence.com