A flaw was found in perl-Imager. When processing floating-point samples from a paletted image, the application allocates an undersized buffer for multi-channel requests. An attacker could provide a specially crafted image to trigger a heap-based buffer overflow with controlled data, potentially leading to arbitrary code execution or a Denial of Service (DoS).
Last checked: 2026-10-08 15:16 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-01 19:32 UTC)
Fix evidence last checked: 2026-10-01 16:37 UTC