HappySeaFox sail

• CVE-2026-59959 Medium 4.8 SAIL: WebP decoder division by zero through malformed animated canvas metadata 0.1%
• CVE-2026-54692 High 7.8 SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write) 0.2%
• CVE-2026-54627 Critical 9.8 SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth) 0.8%
• CVE-2026-54626 Critical 9.8 SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch) 0.8%
• CVE-2026-40494 Critical 9.8 SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check 0.3%
• CVE-2026-40493 Critical 9.8 SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode 0.4%
• CVE-2026-40492 Critical 9.8 SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap 0.4%
• CVE-2026-27168 High 8.8 SAIL: Heap-based Buffer Overflow in Sail-codecs-xwd 0.4%