Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j48m-64vj-6rm9

Опубликовано: 08 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.

Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.

An attacker could craft an image with EXIF data that terminates a worker process.

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.

Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.

An attacker could craft an image with EXIF data that terminates a worker process.

EPSS

Процентиль: 31%
0.00374
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-196

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 2 месяцев назад

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.

CVSS3: 9.8
nvd
около 2 месяцев назад

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.

CVSS3: 9.8
debian
около 2 месяцев назад

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry co ...

EPSS

Процентиль: 31%
0.00374
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-196