CVE catalog

CVE-2026-102504

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol. Nothing range-checks raw_datachannels. The line buffer is siz

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.39% · Oct 25, 2026

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol. Nothing range-checks raw_datachannels. The line buffer is sized as the image width times the channel count with no overflow check, so a negative or very large count requests an excessive allocation. When it fails, Imager's allocator calls exit(3). Passing an untrusted raw_datachannels value to Imager->read() triggers an uncatchable exit.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibimager-perlsid1.040+dfsg-1fixed
Debianlibimager-perlforky1.037+dfsg-2fixed
Debianlibimager-perltrixie1.027+dfsg-1vulnerable
Debianlibimager-perlbookworm1.019+dfsg-1vulnerable
CpeimagerNot reported1.037fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibimager-perlsourcesid1.037+dfsg-2not yet assignedNot reportedNot reported
Debianlibimager-perlsourceforky1.037+dfsg-2not yet assignedNot reportedNot reported
Debianlibimager-perlsourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debianlibimager-perlsourcebookworm(unfixed)not yet assignedNot reportedNot reported
CpeimagercpeNot reported1.037Not reportedNVD-CVE-2026-102504Not reported

Notes

[trixie] libimager-perl: Minor issue [bookworm] libimager-perl: Minor issue; needs an untrusted raw_datachannels option passed to read()

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libimager-perl]Affected

    Source package: [libimager-perl]

    Details (2)

    • 1.019+dfsg-1+b2 · amd64 · bookworm

      Affected

      nvd · libimager-perl · debian · bookworm; nvd · libimager-perl · debian · 12

    • 1.019+dfsg-1+b2 · arm64 · bookworm

      Affected

      nvd · libimager-perl · debian · bookworm; nvd · libimager-perl · debian · 12

[Debian 13 (Trixie)]

  • [libimager-perl]Affected
    Details (2)

    • 1.027+dfsg-1 · amd64 · trixie

      Affected

      nvd · libimager-perl · debian · 13

    • 1.027+dfsg-1 · arm64 · trixie

      Affected

      nvd · libimager-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]