Описание
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save() writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an untrusted .psd can be made to write attacker-chosen bytes to an attacker-chosen path (absolute or ../-traversing), outside its intended output directory. A secondary issue in SmartObject.open() for external-kind smart objects allows the attacker-controlled fullPath descriptor to be used as an arbitrary file read path, enabling exfiltration of the read content to the controlled write destination. Both issues are fixed in v1.17.1.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.17.4+dfsg.1-1 |
| esm-apps/noble | needs-triage | |
| esm-apps/resolute | needs-triage | |
| jammy | DNE | |
| noble | needs-triage | |
| resolute | needs-triage | |
| stonking | not-affected | 1.17.4+dfsg.1-1 |
| upstream | released | 1.17.4+dfsg.1-1 |
Показывать по
Ссылки на источники
EPSS
Связанные уязвимости
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, `SmartObject.save()` writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an untrusted `.psd` can be made to write attacker-chosen bytes to an attacker-chosen path (absolute or `../`-traversing), outside its intended output directory. A secondary issue in `SmartObject.open()` for external-kind smart objects allows the attacker-controlled `fullPath` descriptor to be used as an arbitrary file read path, enabling exfiltration of the read content to the controlled write destination. Both issues are fixed in v1.17.1.
psd-tools is a Python package for working with Adobe Photoshop PSD fil ...
psd-tools vulnerable to arbitrary file write via smart-object filename
ALT-PU-2026-19069: package `python3-module-psd-tools` update to version 1.25.0-alt1
EPSS