https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 05:47:34 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-102505 <p>Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp.</p> <p>For a paletted image, getsamples() with type &#34;float&#34; allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one channel writes past its end.</p> <p>An attacker-supplied image controls the overflowing bytes through its palette.</p> <p>Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp.</p> <p>For a paletted image, getsamples() with type &#34;float&#34; allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one channel writes past its end.</p> <p>An attacker-supplied image controls the overflowing bytes through its palette.</p> https://db.gcve.eu/vuln/fkie_cve-2026-102505