TI-2026-15600 CVE-2026-19082
Out-of-bounds read in TONYC Imager
Priority HIGH 72
Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags.
TONYC
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
TONYC records in CISA KEVNo TONYC vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2026-12218 CVE-2026-14454 · GHSA-j48m-64vj-6rm9
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
Priority MEDIUM 50
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.
TI-2026-11557 CVE-2026-13708 · GHSA-cx44-fgg3-fcp4
Memory leak in TONYC Imager::File::JPEG
Priority MEDIUM 40
Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol.
TI-2026-07618 CVE-2026-8669 · GHSA-6275-mpwc-pq3g
Out-of-bounds write in TONYC Imager
Priority LOW 35
Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.
TI-2026-11554 CVE-2026-13705 · GHSA-pmgh-mrwc-qw67
Out-of-bounds read in TONYC Imager
Priority LOW 30
Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle.
TI-2026-07428 CVE-2026-8454 · GHSA-8r2w-8p2v-h4g4
Out-of-bounds write in TONYC Imager::File::GIF
Priority LOW 23
Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.