Threats affecting pkg:github/happyseafox/sail

A divide-by-zero vulnerability exists in the HappySeaFox sail library's WebP decoder prior to version 1.0.2. The flaw occurs during loader initialization when processing malformed animated WebP files with inconsistent container or frame metadata, leading to a zero canvas width used as a divisor. This causes an arithmetic fault and process termination, resulting in a denial of service for applications that accept untrusted WebP images and include the affected codec. The issue is fixed in version 1.0.2.

A heap buffer overflow vulnerability exists in HappySeaFox sail library versions prior to 1.0.0 in the function sail_codec_load_frame_v8_xbm(). The issue arises from incorrect buffer size calculation when decoding certain X10 static short files, leading to a forward heap overwrite that scales with image height. This can corrupt process state, cause crashes, and potentially allow code execution. The vulnerability is fixed in version 1.0.0.

A heap-based buffer overflow vulnerability exists in HappySeaFox sail versions before 1.0.0. The flaw occurs in the PSD image loading code where a mismatch between pixel format and file depth causes out-of-bounds writes when loading crafted PSD files. This can lead to memory corruption, crashes, or potential code execution. The issue is fixed in version 1.0.0.

A heap-based buffer overflow vulnerability exists in HappySeaFox sail versions prior to 1.0.0. The flaw occurs when loading crafted color-mapped run-length-encoded TGA images, where the pixel buffer allocation does not match the attacker-controlled pixel size derived from the image header. This mismatch allows writing beyond the allocated heap buffer, potentially causing heap corruption, crashes, or code execution. The issue is an incomplete fix of a previous vulnerability (CVE-2026-40494) and has been resolved in version 1.0.0.