CVE-2026-14454: falha crítica em TONYC Imager
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.7%
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.
Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.
An attacker could craft an image with EXIF data that terminates a worker process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
TONYC · ImagerCVEs relacionadas — TONYC Imager
No mesmo produto, das mais perigosas para as menos.
CVE-2026-19082HIGHImager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tagsEPSS 0.4%CVE-2026-8669MEDIUMImager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF filesEPSS 0.3%CVE-2026-13705HIGHImager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rleEPSS 0.2%