Imager::File::GIF before 1.006 allows out-of-bounds GIF reads
Stig Palmquist reported the Perl module issue to oss-security on October 20.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #imager
CVE-2026-102505: Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp
Perl Imager before 1.037 has heap buffer overflow CVE-2026-102505 when fetching float samples from paletted images.
CVE-2026-93019: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read
CVE-2026-93019: Imager for Perl versions before 1.036 exit the process when reading a TGA image with a colour map length of 32768 or more.
CVE-2026-73639: Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8
Perl module Imager::File::PNG before 1.004 writes past the end of the row buffer when reading PNGs with a tRNS transparency chunk.