EUVD-2026-90811

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range rawdatachannels value in ireadrawwiol. Nothing range-checks rawdatachannels. The line buffer is sized as the image width times the channel count with no overflow check, so a negative or very large coun...

CVE-2026-102504

Imager versions before 1.037 for Perl exit the process reading a raw i...

PT-2026-103861

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw datachannels value in i readraw wiol. Nothing range-checks raw datachannels. The line buffer is sized as the image width times the channel count with no overflow check, so a negative or very large...

CVE-2026-93019: Unsigned to Signed Conversion Error

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2006-4434

Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service crash via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of...