Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Imager

cpan

Perl extension for Generating 24 bit Images

View on github.com · View on metacpan.org

Security Advisories for Imager in cpan

High
14 days ago

Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags. CPANSA-Imager-2026-19082

cpan Imager
about 1 month ago

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the add... CPANSA-Imager-2026-14454

cpan Imager
about 2 months ago

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle guards each literal run with if (count > data_left), but count is a pixel cou... CPANSA-Imager-2026-13705

cpan Imager
Potential
about 2 months ago

Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with *iptc_... CPANSA-Imager-File-JPEG-2026-13708

cpan Imager-File-JPEG
3 months ago

Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuse... CPANSA-Imager-2026-8669

cpan Imager
Potential
3 months ago

Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth... CPANSA-Imager-File-GIF-2026-8454

cpan Imager-File-GIF
Moderate
almost 2 years ago

"invalid next size" backtrace on use of trim on certain images CPANSA-Imager-2024-001

cpan Imager
High
about 10 years ago

Imager would search the default current directory entry in @INC when searching for file format support modules. CPANSA-Imager-2016-1238

cpan Imager
over 12 years ago

When drawing on an image with an alpha channel where the source minimum is greater than zero, Imager would read from beyond the end of a malloc() allocated buffer. In rare circumstances this could lead to some of the source image not being written to ... CPANSA-Imager-2014-01

cpan Imager
over 18 years ago

Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels. CPANSA-Imager-2008-1928

cpan Imager
over 19 years ago

Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compresse... CPANSA-Imager-2007-2459

cpan Imager
over 20 years ago

Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-channel JPEG image (or a 2-channel TGA image) to a scalar, which triggers a NULL pointer dereference. CPANSA-Imager-2006-0053

cpan Imager

Filter by Severity

High 2 Moderate 1