Imager::File::GIF before 1.006 allows out-of-bounds GIF reads
Stig Palmquist reported the Perl module issue to oss-security on October 20.
34
Vendor
Imager
- Mentions · 7d0
- Mentions · 30d1
- All mentions5
- First seenSep 17, 2026
- Last mentioned21d ago
Timeline
5 articles · newest firstCVE-2026-93019: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read
CVE-2026-93019: Imager for Perl versions before 1.036 exit the process when reading a TGA image with a colour map length of 32768 or more.
22
CVE-2026-93018: Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p
CVE-2026-93018: Imager for Perl versions before 1.036 disclose uninitialized heap memory when reading paletted images with pixel indexes past the colour map.
22
CVE-2026-73639: Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8
Perl module Imager::File::PNG before 1.004 writes past the end of the row buffer when reading PNGs with a tRNS transparency chunk.
40
CVE-2026-73638: Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd
Perl image library Imager before 1.035 reads outside the EXIF block via unchecked start offsets in tiff_load_ifd, fixed in 1.035.
35
Related CVEs
by mentions- DoS in Perl Imager: crafted TGA colour map length triggers uncatchable process exit
- Heap buffer overflow in Imager::File::PNG Perl module when reading PNGs with tRNS chunks
- Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images
- Out-of-bounds read in Perl Imager TIFF/EXIF parser (tiff_load_ifd)
- Heap Memory Disclosure in Imager Perl Module (< 1.036) via Paletted Image Parsing
Appears with
- Imagerproduct · 3
- Perlorganization · 2
- Imager::File::PNGproduct · 1
- Imager::File::GIFproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.