← Back

Imager

imager

Vendor: Tonycoz • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-14454
1Tonycoz
1Imager
Jul 10, 2026
Jul 8, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a...Show more
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.Show less
CVE-2024-53901
1Tonycoz
1Imager
Jun 17, 2026
Nov 24, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.