CVE-2026-73639: Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8
Perl module Imager::File::PNG before 1.004 writes past the end of the row buffer when reading PNGs with a tRNS transparency chunk.
CVE-2026-73639 affects Imager::File::PNG versions 1.003 through before 1.004 for Perl. The flaw is a write past the end of the row buffer in read_direct8 when processing a PNG containing a tRNS transparency chunk. The bug was disclosed on the oss-security mailing list by Stig Palmquist, with the fix available in version 1.004.
- Affects Imager::File::PNG versions 1.003 through before 1.004
- Memory corruption occurs in read_direct8 with tRNS transparency chunks
- Fix available in version 1.004
- Disclosed on oss-security by Stig Palmquist
- CVEs
- CVE-2026-73639
- Vendors
- Imager
- Products
- Imager::File::PNG
- Organizations
- Perl
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-73639 | Heap buffer overflow in Imager::File::PNG Perl module when reading PNGs with tRNS chunks | 9.1 | — |
From the original article
Posted by Stig Palmquist on Sep 17 ======================================================================== https://metacpan. org/dist/Imager-File-PNG https://github. com/tonycoz/imager...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.