CVE-2026-93019 Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2026-93019 Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2026-93019

The Imager Perl module (versions before 1.036 ) is vulnerable to a Denial of Service (DoS) due to an unsigned to signed conversion error . When processing a TGA image, the tga_palette_read function unpacks a two-byte color map length into a signed short . If the length is 32768 or more , the valu...

CVE-2026-93019 Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2026-93018

Perl Imager versions before 1.036 are vulnerable to a memory disclosure flaw when processing paletted images. The issue stems from the palette being allocated uninitialised; while the TGA reader stores pixel indexes without checking them against the colour map, the functions i_gpix_p and i_glin_p...

CVE-2026-93018 Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in igpixp and iglinp. The palette is allocated uninitialised, and only the entries a reader adds count as populated. The TGA reader stores pixel indexes without...

CVE-2026-93018 Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in igpixp and iglinp. The palette is allocated uninitialised, and only the entries a reader adds count as populated. The TGA reader stores pixel indexes without...

CVE-2026-93018

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in igpixp and iglinp. The palette is allocated uninitialised, and only the entries a reader adds count as populated. The TGA reader stores pixel indexes without...

EUVD-2026-82926

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in igpixp and iglinp. The palette is allocated uninitialised, and only the entries a reader adds count as populated. The TGA reader stores pixel indexes without...

CVE-2026-78183

A flaw was found in DBD::Pg for Perl. This vulnerability involves a heap out-of-bounds write in the quotefloat function when processing special numeric literals such as "Infinity". An attacker could potentially exploit this by providing specific input to the $dbh-quote method, leading to a two-by...

CVE-2026-72888

A flaw was found in Net::OAuth for Perl. A remote attacker can exploit an unbounded caching mechanism in the smartrequire function to cause memory exhaustion. This occurs because the smartrequire function stores results, including failed module loads, in a process-global hash without any size lim...

CVE-2026-19873

A flaw was found in HTML::FormFu for Perl. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted request with an unbounded repeat count to a Repeatable element. The application's process method reads the repeat count from the query string,...

CVE-2026-15743

A flaw was found in Catalyst::Plugin::Static::Simple for Perl. The servestatic method incorrectly sets the Cache-Control header to "public" for all responses. This misconfiguration allows intermediate proxies to store sensitive content, including responses from authenticated sessions, in shared...

CLEANSTART-2026-YO60841 Security fix for CVE-2017-12883 applied in: perl 5.26.1-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TD24481 Security fix for CVE-2018-6913 applied in: perl 5.26.2-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NC70376 Security fix for CVE-2017-12837 applied in: perl 5.26.1-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BR63033 Security fix for CVE-2018-6797 applied in: perl 5.26.2-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SI51157 Security fix for CVE-2018-6798 applied in: perl 5.26.2-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CC44025 Security fix for CVE-2018-12015 applied in: perl 5.26.2-r1

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WW27643 Security fix for CVE-2018-18314 applied in: perl 5.26.3-r0

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...