CVE catalog
CVE-2026-14454
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an at
- Severity
- Critical · CVSS 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.66% · Oct 25, 2026
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | libimager-perl | sid | 1.040+dfsg-1 | fixed |
| Debian | libimager-perl | forky | 1.037+dfsg-2 | fixed |
| Debian | libimager-perl | trixie | 1.027+dfsg-1 | vulnerable |
| Debian | libimager-perl | bookworm | 1.019+dfsg-1 | vulnerable |
| Cpe | libimager-perl | Not reported | Not reported | vulnerable |
| Cpe | imager | Not reported | 1.033 | fixed |
| Cpe | imager | Not reported | 1.033 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | libimager-perl | source | sid | 1.033+dfsg-1 | not yet assigned | Not reported | [1141959] |
| Debian | libimager-perl | source | forky | 1.033+dfsg-1 | not yet assigned | Not reported | [1141959] |
| Debian | libimager-perl | source | trixie | (unfixed) | not yet assigned | Not reported | [1141959] |
| Debian | libimager-perl | source | bookworm | (unfixed) | not yet assigned | Not reported | [1141959] |
| Cpe | imager | cpe | Not reported | 1.033 | Not reported | Not reported | Not reported |
| Cpe | imager | cpe | Not reported | 1.033 | Not reported | NVD-CVE-2026-14454 | Not reported |
Notes
[trixie] libimager-perl: Minor issue [bookworm] libimager-perl: Minor issue; crafted EXIF data can kill the process via a failed huge allocation
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libimager-perl]Affected
Source package: [libimager-perl]
Details (2)
1.019+dfsg-1+b2· amd64 · bookwormAffected
nvd · libimager-perl · debian · bookworm; nvd · libimager-perl · debian · 12
1.019+dfsg-1+b2· arm64 · bookwormAffected
nvd · libimager-perl · debian · bookworm; nvd · libimager-perl · debian · 12
[Debian 13 (Trixie)]
- [libimager-perl]Affected
Details (2)
1.027+dfsg-1· amd64 · trixieAffected
nvd · libimager-perl · debian · 13
1.027+dfsg-1· arm64 · trixieAffected
nvd · libimager-perl · debian · 13
Observed:
References
- [http://www.openwall.com/lists/oss-security/2026/07/08/6]
- [https://github.com/tonycoz/imager/commit/06f01a5d0fd591259aeba589370d6888384a6b6d.patch]
- [https://metacpan.org/release/TONYC/Imager-1.033/changes]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-14454]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-14454]
- [https://security-tracker.debian.org/tracker/CVE-2026-14454]
[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]