Cisco Talos is disclosing a vulnerability within Computerinsel PhotoLine’s PSD-parsing functionality. Photoline is an image processing tool used to modify and edit images. The vulnerability arises in parsing the PSD document. The application takes data directly from the document without verification and uses it to calculate an address. The document has a specially crafted blending channel value leading to this miscalculation. A specially crafted PCX image processed via the application can lead to an out-of-bounds write overwriting arbitrary data.”]
Source: https://blog.talosintelligence.com/2018/04/PhotoLine-PSD-Code-Execution.html