CVE-2020-10571: Psd-Tools Project Psd-Tools

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.

Affected products

• Psd-Tools Project Psd-Tools: before 1.9.4 (fixed in 1.9.4)

Published 2020-03-14. Last modified 2026-06-17.