Skip to content
Threat Feed
Subscribe

Tag

CVE-2026-40494

1 brief RSS
critical advisory

SAIL Library TGA RLE Decoder Heap Overflow Vulnerability

The SAIL library versions before commit 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302 are vulnerable to a heap overflow in the TGA codec's RLE decoder, where the raw-packet path lacks bounds checking, potentially leading to privilege escalation via crafted image files.

SAIL library CVE-2026-40494 sail tga heap-overflow privilege-escalation
2r 1t 1c