Read the docs
TI-2008-01852 Aliases CVE-2008-1928GHSA-27p3-v3ff-v3x4

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service…

Priority LOW 26CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.

Why it matters now

EPSS 0.01672 76th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:a:imager:imager:0.42:*:*:*:*:*:*:*0.42VulnerableImager
cpe:2.3:a:imager:imager:0.43:*:*:*:*:*:*:*0.43VulnerableImager
cpe:2.3:a:imager:imager:0.43_03:*:*:*:*:*:*:*0.43_03VulnerableImager
cpe:2.3:a:imager:imager:0.44:*:*:*:*:*:*:*0.44VulnerableImager
cpe:2.3:a:imager:imager:0.44_01:*:*:*:*:*:*:*0.44_01VulnerableImager
cpe:2.3:a:imager:imager:0.45:*:*:*:*:*:*:*0.45VulnerableImager
cpe:2.3:a:imager:imager:0.45_02:*:*:*:*:*:*:*0.45_02VulnerableImager
cpe:2.3:a:imager:imager:0.46:*:*:*:*:*:*:*0.46VulnerableImager
cpe:2.3:a:imager:imager:0.47:*:*:*:*:*:*:*0.47VulnerableImager
cpe:2.3:a:imager:imager:0.48:*:*:*:*:*:*:*0.48VulnerableImager
  • cpe:2.3:a:imager:imager:0.42:*:*:*:*:*:*:* Versions 0.42 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.43:*:*:*:*:*:*:* Versions 0.43 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.43_03:*:*:*:*:*:*:* Versions 0.43_03 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.44:*:*:*:*:*:*:* Versions 0.44 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.44_01:*:*:*:*:*:*:* Versions 0.44_01 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.45:*:*:*:*:*:*:* Versions 0.45 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.45_02:*:*:*:*:*:*:* Versions 0.45_02 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.46:*:*:*:*:*:*:* Versions 0.46 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.47:*:*:*:*:*:*:* Versions 0.47 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.48:*:*:*:*:*:*:* Versions 0.48 Vulnerable ·Imager
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:imager:imager:0.49:*:*:*:*:*:*:*0.49VulnerableImager
cpe:2.3:a:imager:imager:0.49_01:*:*:*:*:*:*:*0.49_01VulnerableImager
cpe:2.3:a:imager:imager:0.50:*:*:*:*:*:*:*0.50VulnerableImager
cpe:2.3:a:imager:imager:0.51:*:*:*:*:*:*:*0.51VulnerableImager
cpe:2.3:a:imager:imager:0.51_01:*:*:*:*:*:*:*0.51_01VulnerableImager
cpe:2.3:a:imager:imager:0.51_02:*:*:*:*:*:*:*0.51_02VulnerableImager
cpe:2.3:a:imager:imager:0.51_03:*:*:*:*:*:*:*0.51_03VulnerableImager
cpe:2.3:a:imager:imager:0.52:*:*:*:*:*:*:*0.52VulnerableImager
cpe:2.3:a:imager:imager:0.53:*:*:*:*:*:*:*0.53VulnerableImager
cpe:2.3:a:imager:imager:0.55:*:*:*:*:*:*:*0.55VulnerableImager
cpe:2.3:a:imager:imager:0.56:*:*:*:*:*:*:*0.56VulnerableImager
cpe:2.3:a:imager:imager:0.57:*:*:*:*:*:*:*0.57VulnerableImager
cpe:2.3:a:imager:imager:0.58:*:*:*:*:*:*:*0.58VulnerableImager
cpe:2.3:a:imager:imager:0.59:*:*:*:*:*:*:*0.59VulnerableImager
cpe:2.3:a:imager:imager:0.60:*:*:*:*:*:*:*0.60VulnerableImager
cpe:2.3:a:imager:imager:0.61:*:*:*:*:*:*:*0.61VulnerableImager
cpe:2.3:a:imager:imager:0.62:*:*:*:*:*:*:*0.62VulnerableImager
cpe:2.3:a:imager:imager:0.63:*:*:*:*:*:*:*0.63VulnerableImager
  • cpe:2.3:a:imager:imager:0.49:*:*:*:*:*:*:* Versions 0.49 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.49_01:*:*:*:*:*:*:* Versions 0.49_01 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.50:*:*:*:*:*:*:* Versions 0.50 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.51:*:*:*:*:*:*:* Versions 0.51 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.51_01:*:*:*:*:*:*:* Versions 0.51_01 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.51_02:*:*:*:*:*:*:* Versions 0.51_02 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.51_03:*:*:*:*:*:*:* Versions 0.51_03 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.52:*:*:*:*:*:*:* Versions 0.52 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.53:*:*:*:*:*:*:* Versions 0.53 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.55:*:*:*:*:*:*:* Versions 0.55 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.56:*:*:*:*:*:*:* Versions 0.56 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.57:*:*:*:*:*:*:* Versions 0.57 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.58:*:*:*:*:*:*:* Versions 0.58 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.59:*:*:*:*:*:*:* Versions 0.59 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.60:*:*:*:*:*:*:* Versions 0.60 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.61:*:*:*:*:*:*:* Versions 0.61 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.62:*:*:*:*:*:*:* Versions 0.62 Vulnerable ·Imager
  • cpe:2.3:a:imager:imager:0.63:*:*:*:*:*:*:* Versions 0.63 Vulnerable ·Imager

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-1928
  2. 2026-10-03 Alias added: GHSA-27p3-v3ff-v3x4

References

Advisory 1

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences