Memory Corruption Vulnerability in SAIL Image Decoding Library

CVE-2025-35984

What is CVE-2025-35984?

A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library version 0.9.8. When handling specially crafted .pcx files, the library is susceptible to a heap-based buffer overflow, which can be exploited for remote code execution. To exploit this vulnerability, an attacker must convince the library to process a malicious file.

References