Read the docs
TI-2026-12218 Aliases CVE-2026-14454GHSA-j48m-64vj-6rm9

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

Priority MEDIUM 50CWE-196Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-789.

Summary

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00657 51st percentileScored 2026-11-08
Fix Fixed Imager (TONYC): 1.033

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TONYCImagerbefore 1.0331.033Patch availableCNA
  • Imager VendorTONYC Affected before 1.033 Fixed in 1.033 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:tonycoz:imager:*:*:*:*:*:perl:*:*before 1.033VulnerableTonycoz
  • cpe:2.3:a:tonycoz:imager:*:*:*:*:*:perl:*:* Versions before 1.033 Vulnerable ·Tonycoz

Remediation

  • Fix · CNA Imager (TONYC) Fixed in 1.033

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-14454
  2. 2026-10-03 Alias added: GHSA-j48m-64vj-6rm9
  3. 2026-10-11 EPSS moved to the 50th–90th percentile

References

Patch 2

Other 1

  • TI-2026-15600 Out-of-bounds read in TONYC Imager CVSS 3.1HIGH 7.5
  • TI-2026-11557 Memory leak in TONYC Imager::File::JPEG CVSS 3.1HIGH 7.5
  • TI-2026-07618 Out-of-bounds write in TONYC Imager CVSS 3.1MEDIUM 6.5
  • TI-2026-11554 Out-of-bounds read in TONYC Imager CVSS 3.1HIGH 7.1
  • TI-2026-07428 Out-of-bounds write in TONYC Imager::File::GIF CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences