The PCD coder’s DecodeImage loop allows a crafted PCD file to trigger a 1‑byte heap out-of-bounds read when decoding an image (Denial of service) and potential disclosure of adjacent heap byte.
{
"cwe_ids": [
"CWE-125"
],
"github_reviewed_at": "2026-02-25T19:12:23Z",
"nvd_published_at": null,
"github_reviewed": true,
"severity": "LOW"
}