psd-tools has 4 CVEs on record between 2020 and 2026. 2 were published in the last 90 days. The median CVSS is 7.5 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Worst active — by depth score
CVE-2020-10571Critical· 9.8Potential buffer overflow in psd-tools54CVE-2026-59991High· 7.5psd-tools is a Python package for working with Adobe Photoshop PSD files53CVE-2026-49836Medium· 4.6psd-tools is a Python package for working with Adobe Photoshop PSD files37CVE-2026-27809Mediumpsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps28
psd-tools vulnerabilities
CVEs affecting psd-tools, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-59991High· 7.5PoCpsd-tools is a Python package for working with Adobe Photoshop PSD files
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite() and PSDImage.numpy() allocated output buffers from attacker-controlled PSD header geometry, including width, height, channels…
CVE-2026-49836Medium· 4.6PoCpsd-tools is a Python package for working with Adobe Photoshop PSD files
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, `SmartObject.save()` writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled …
CVE-2026-27809Mediumpsd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps
psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps
CVE-2020-10571Critical· 9.8Potential buffer overflow in psd-tools
Potential buffer overflow in psd-tools