Imager (Vendor): news timeline & CVEs

CVE-2026-93019: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

CVE-2026-93019: Imager for Perl versions before 1.036 exit the process when reading a TGA image with a colour map length of 32768 or more.

Stig Palmquist disclosed CVE-2026-93019, a denial-of-service flaw in the Imager image library for Perl. Versions before 1.036 terminate the process inside tga_palette_read when parsing a TGA file with a colour map length of 32768 or greater, allowing a crafted image to crash any application that processes untrusted files. The issue is fixed in Imager 1.036; no exploitation has been reported.

oss-securitySep 18, 16:13 UTC · 8d agoVulnerability 2 sources CVE-2026-93019

CVE-2026-93018: Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

CVE-2026-93018: Imager for Perl versions before 1.036 disclose uninitialized heap memory when reading paletted images with pixel indexes past the colour map.

Stig Palmquist disclosed CVE-2026-93018, an information disclosure flaw in the Imager library for Perl. Versions before 1.036 return uninitialized heap memory through i_gpix_p and i_glin_p when a paletted image contains pixel indexes beyond its colour map, potentially leaking sensitive process memory via decoded image data. The fix is included in Imager 1.036; no exploitation has been reported.

oss-securitySep 18, 16:11 UTC · 8d agoVulnerability 2 sources CVE-2026-93018

CVE-2026-73639: Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

Perl module Imager::File::PNG before 1.004 writes past the end of the row buffer when reading PNGs with a tRNS transparency chunk.

CVE-2026-73639 affects Imager::File::PNG versions 1.003 through before 1.004 for Perl. The flaw is a write past the end of the row buffer in read_direct8 when processing a PNG containing a tRNS transparency chunk. The bug was disclosed on the oss-security mailing list by Stig Palmquist, with the fix available in version 1.004.

oss-securitySep 17, 22:08 UTC · 9d agoVulnerability 2 sources CVE-2026-73639

CVE-2026-73638: Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd

Perl image library Imager before 1.035 reads outside the EXIF block via unchecked start offsets in tiff_load_ifd, fixed in 1.035.

CVE-2026-73638 affects Imager versions 0.45_02 through before 1.035 for Perl. The flaw is an out-of-bounds read outside the EXIF block caused by unchecked start offsets in the tiff_load_ifd function. It was disclosed on the oss-security mailing list by Stig Palmquist alongside CVE-2026-73639, with the fix available in version 1.035.

oss-securitySep 17, 22:06 UTC · 9d agoVulnerability 2 sources CVE-2026-73638

Imager

Timeline4 articles

Related CVEsby mentions

Appears with

CVE-2026-93019: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

CVE-2026-93018: Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

CVE-2026-73639: Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

CVE-2026-73638: Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd