Riskcovery

CVE-2026-14454

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

State
Published
Severity
9.8 Critical
Published
Jul 8, 2026
Updated
Jul 9, 2026
Reserved
Jul 2, 2026

Read the record on cve.org

Description

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.

Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.

An attacker could craft an image with EXIF data that terminates a worker process.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-196 Unsigned to Signed Conversion Error
  • CWE-789 Memory Allocation with Excessive Size Value

Affected Products

ProductVersions
ImagerTONYC
  • before 1.033Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.