Tonycoz

tonycoz

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Imager

imager

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-14454 1Tonycoz 1Imager Jul 10, 2026 Jul 8, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a...Show more Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.Show less
CVE-2024-53901 1Tonycoz 1Imager Jun 17, 2026 Nov 24, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2026-14454

1Tonycoz

1Imager

Jul 10, 2026

Jul 8, 2026

N/A· v4

9.8 CRITICAL· v3

N/A· v2

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.Show less

CVE-2024-53901

1Tonycoz

1Imager

Jun 17, 2026

Nov 24, 2024

N/A· v4

5.5 MEDIUM· v3

N/A· v2

The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.