CVE-2026-102504: Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol

Imager, a Perl image-processing library, fails to validate the raw_datachannels field when reading a 'raw' format image in i_readraw_wiol, in all versions before 1.037. The value is used to size a line buffer as image width times channel count with no range or overflow check, so a negative or very large count requests an excessive allocation; when that allocation fails, Imager's internal allocator calls exit(3), terminating the entire Perl process in a way the application cannot catch or trap. An attacker triggers the flaw by getting an application that feeds untrusted files to Imager->read() to process a crafted raw image with a malicious raw_datachannels value, yielding a straightforward denial of service against services such as web apps that accept and process image uploads. Any deployment using Imager before 1.037 that reads raw-format images from untrusted sources is affected. The vulnerability has no CVSS score yet, no public proof of concept, is not in the CISA KEV catalog, and there is no evidence of exploitation in the wild.