CVE-2026-40494 — AI Deep Analysis Summary

🚨 **Essence**: SAIL (image decoding library) has a critical flaw in its TGA RLE decoder. <br>💥 **Consequences**: Asymmetric boundary checks lead to **Heap Buffer Overflow**.…

🛡️ **Root Cause**: **CWE-787** (Out-of-bounds Write). <br>🔍 **Flaw**: The RLE (Run-Length Encoding) decoder in the TGA codec performs **asymmetric boundary checks**.…

📦 **Affected**: **HappySeaFox/sail** (SAIL open-source image decoding library). <br>⚠️ **Scope**: Any application using SAIL to decode **TGA files** with RLE compression is at risk.…

🕵️ **Attacker Actions**: <br>1. **Full Control**: CVSS Score is **9.8 (Critical)**. <br>2. **Data**: Complete Confidentiality, Integrity, and Availability loss. <br>3.…

🔓 **Exploitation Threshold**: **LOW**. <br>📝 **Details**: <br>- **AV:N** (Network accessible) <br>- **AC:L** (Low complexity) <br>- **PR:N** (No privileges required) <br>- **UI:N** (No user interaction needed) <br>👉 Hack…

💣 **Public Exploit?**: **No PoC provided** in the data.…

🔍 **Self-Check**: <br>1. Scan your codebase for dependencies on **SAIL**. <br>2. Check if your app processes **TGA images** with RLE compression. <br>3.…

✅ **Fixed?**: **YES**. <br>🔗 **Patch**: See GitHub Advisory [GHSA-cp2j-rwh4-r46f](https://github.com/HappySeaFox/sail/security/advisories/GHSA-cp2j-rwh4-r46f).…

🚧 **No Patch Workaround**: <br>1. **Disable TGA RLE**: If possible, configure SAIL to ignore or reject RLE-compressed TGA files. <br>2.…

🔥 **Urgency**: **CRITICAL (Immediate Action)**. <br>📅 **Priority**: Patch immediately. With a **CVSS 9.8** score and no user interaction required, this is a high-priority target for automated attacks.…