Critical SAIL Library Bug: Memory Corruption Threat in Image Processing

The National Vulnerability Database has disclosed CVE-2026-40492, a critical memory corruption vulnerability in SAIL, a widely used cross-platform image loading and saving library. This flaw, rated 9.8 CVSS, stems from a logic error in the XWD codec where pixel format resolution (based on pixmap_depth) is decoupled from byte-swap operations (bits_per_pixel).

Specifically, when pixmap_depth is set to 8 (indicating a 1 byte/pixel buffer) but bits_per_pixel is 32, the byte-swap routine attempts to access memory as uint32_t*. This leads to out-of-bounds read/write operations, potentially accessing memory four times the allocated buffer size. This is distinct from CVE-2026-27168, which addressed bytes_per_line validation.

Attackers could exploit this vulnerability by crafting malicious image files, leading to arbitrary code execution, denial of service, or information disclosure on systems processing these images. A patch is available in commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02. Defenders must prioritize updating to mitigate this severe risk.