IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-07-08 13:16

MODIFIED

2026-07-08 13:16

EPSS (Prob. Exploit)

0.66%

Top 49.1%

DATA SOURCES:

NVD 🔗 2026-07-08 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-15

> DESCRIPTION

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-196 CWE-789

> CWE DETAILED DESCRIPTIONS

CWE-196: Unsigned to Signed Conversion Error - The product uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value if the value of the unsigned primitive can not be represented using a signed primitive. | CWE-789: Memory Allocation with Excessive Size Value - The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

AFFECTED PACKAGES:

Unknown / Unknown

89 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

08/07/2026 13:16

Source: NVD

📊 ENRICHISSEMENT 01/08/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

Total des modifications: 1 Dernière mise à jour: 3 months ago

> REFERENCES

https://github.com/tonycoz/imager/commit/06f01a5d0fd591259aeba589370d6888384a6b6...

https://metacpan.org/release/TONYC/Imager-1.033/changes