CVE-2020-1950: Uncontrolled Resource Consumption in Apache Tika

The vulnerability (CVE-2020-1950) explicitly affects Apache Tika's PSDParser in versions 1.0-1.23. The CWE-400 classification indicates uncontrolled resource consumption, typically caused by parsing logic that fails to validate input-driven memory allocation. The PSDParser's parse() method is the entry point for processing PSD files and would handle layer/data structure parsing. Without bounds checking on values like layer counts or image dimensions extracted from the file header, a malicious PSD could specify abnormally large values leading to memory exhaustion. The patch in version 1.24 likely added validation checks in this critical parsing pathway.