https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T08:10:33.431881+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-93019 fkie_cve-2026-93019 2026-09-28T08:10:33.459396+00:00

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read.

The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tga_palette_read() casts that value to size_t and asks mymalloc() for a size near SIZE_MAX. The allocation fails and Imager's allocator calls exit(3).

Reading an attacker-supplied file through Imager->read() triggers an uncatchable exit.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-93019 UBUNTU-CVE-2026-93019 2026-09-28T08:10:33.459474+00:00

Affected: Ubuntu:16.04:LTS: libimager-perl, Ubuntu:18.04:LTS: libimager-perl, Ubuntu:20.04:LTS: libimager-perl, Ubuntu:22.04:LTS: libimager-perl, Ubuntu:24.04:LTS: libimager-perl, Ubuntu:26.04:LTS: libimager-perl

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tga_palette_read() casts that value to size_t and asks mymalloc() for a size near SIZE_MAX. The allocation fails and Imager's allocator calls exit(3). Reading an attacker-supplied file through Imager->read() triggers an uncatchable exit.