CVE-2026-14454: fallo crítico en TONYC Imager
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.8epss 0.7%
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.
Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.
An attacker could craft an image with EXIF data that terminates a worker process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
TONYC · ImagerCVEs relacionadas — TONYC Imager
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-19082HIGHImager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tagsEPSS 0.4%CVE-2026-8669MEDIUMImager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF filesEPSS 0.3%CVE-2026-13705HIGHImager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rleEPSS 0.2%