VYPR
← All advisories
High severity7.8NVD Advisory· Published Aug 30, 2019· Updated Jun 17, 2026

CVE-2019-12810

CVE-2019-12810

Description

A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code.

Affected products

3
  • Estsoft/Alsee2 versions
    cpe:2.3:a:estsoft:alsee:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:estsoft:alsee:*:*:*:*:*:*:*:*range: >=5.3,<=8.39
    • (no CPE)range: 5.3 ~ 8.39
  • ALSee/ALSeellm-create
    Range: 5.3 - 8.39

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.