TI-2026-12218 CVE-2026-14454 · GHSA-j48m-64vj-6rm9
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
Priority MEDIUM 50
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.
No Tonycoz vulnerabilities are listed in CISA KEV.
4 records
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.
Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol.
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp.
The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.