Add advisory for psd: panic via out-of-bounds slice on crafted PSD

[joszamama]

Affected crate(s)

• psd (20,138 recent downloads per crates.io)

Links to upstream issue(s) or PR(s)

• Panic (out-of-bounds slice) parsing a crafted PSD — DoS chinedufn/psd#70

Severity

Denial-of-service via panic. Psd::from_bytes slices the image-data section using an unvalidated header length; a 54-byte crafted PSD triggers an out-of-bounds slice and panics in src/sections/mod.rs on psd 0.3.5. A caller parsing untrusted PSD input without catch_unwind has the thread (or process) torn down.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate