CVE-2026-93019

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2026-8669

CVE-2026-8669 affects Imager versions through 1.030 for Perl, allowing a heap out-of-bounds write when parsing crafted multi-frame GIF files. The root cause is i_readgif_multi_low reusing a single per-row buffer (GifRow) sized to the GIF’s global screen width (SWidth) across multiple images, comb...

DEBIAN-CVE-2024-53901

The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim method is called on a crafted input image...