Vulnerability Details CVE-2026-27809
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.12.2, when a PSD file contains malformed RLE-compressed image data (e.g. a literal run that extends past the expected row size), decode_rle() raises ValueError which propagated all the way to the user, crashing psd.composite() and psd-tools export. decompress() already had a fallback that replaces failed channels with black pixels when result is None, but it never triggered because the ValueError from decode_rle() was not caught. The fix in version 1.12.2 wraps the decode_rle() call in a try/except so the existing fallback handles the error gracefully.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 32.6%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2026-27809
-
cpe:2.3:a:psd-tools_project:psd-tools:0.1
-
cpe:2.3:a:psd-tools_project:psd-tools:0.1.1
-
cpe:2.3:a:psd-tools_project:psd-tools:0.1.2
-
cpe:2.3:a:psd-tools_project:psd-tools:0.1.3
-
cpe:2.3:a:psd-tools_project:psd-tools:0.1.4
-
cpe:2.3:a:psd-tools_project:psd-tools:0.10
-
cpe:2.3:a:psd-tools_project:psd-tools:0.2
-
cpe:2.3:a:psd-tools_project:psd-tools:0.5
-
cpe:2.3:a:psd-tools_project:psd-tools:0.6
-
cpe:2.3:a:psd-tools_project:psd-tools:0.7
-
cpe:2.3:a:psd-tools_project:psd-tools:0.7.1
-
cpe:2.3:a:psd-tools_project:psd-tools:0.8
-
cpe:2.3:a:psd-tools_project:psd-tools:0.8.1
-
cpe:2.3:a:psd-tools_project:psd-tools:0.8.2
-
cpe:2.3:a:psd-tools_project:psd-tools:0.8.3
-
cpe:2.3:a:psd-tools_project:psd-tools:0.8.4
-
cpe:2.3:a:psd-tools_project:psd-tools:0.9
-
cpe:2.3:a:psd-tools_project:psd-tools:0.9.1
-
cpe:2.3:a:psd-tools_project:psd-tools:1.0
-
cpe:2.3:a:psd-tools_project:psd-tools:1.1
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.0
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.1
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.10
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.11
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.12
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.13
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.2
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.3
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.4
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.5
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.6
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.7
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.8
-
cpe:2.3:a:psd-tools_project:psd-tools:1.10.9
-
cpe:2.3:a:psd-tools_project:psd-tools:1.11.0
-
cpe:2.3:a:psd-tools_project:psd-tools:1.11.1
-
cpe:2.3:a:psd-tools_project:psd-tools:1.12.0
-
cpe:2.3:a:psd-tools_project:psd-tools:1.12.1
-
cpe:2.3:a:psd-tools_project:psd-tools:1.2
-
cpe:2.3:a:psd-tools_project:psd-tools:1.3
-
cpe:2.3:a:psd-tools_project:psd-tools:1.4
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.10
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.11
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.12
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.14
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.17
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.21
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.25
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.26
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.27
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.28
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.29
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.30
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.31
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.32
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.33
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.34
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.35
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.36
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.38
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.8
-
cpe:2.3:a:psd-tools_project:psd-tools:1.8.9
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.0
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.1
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.10
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.11
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.12
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.13
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.14
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.15
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.16
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.17
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.18
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.19
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.2
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.20
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.21
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.22
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.23
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.24
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.25
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.26
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.27
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.28
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.29
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.3
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.30
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.31
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.32
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.33
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.34
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.4
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.5
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.6
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.7
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.8
-
cpe:2.3:a:psd-tools_project:psd-tools:1.9.9