Log in Start free

Vulnerability · Published Oct 1, 2026 · Assigned by CPANSec

CVE-2026-102505Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp

Medium 6.3

In plain English

A medium-severity security flaw in Imager. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.2%top 83.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp. For a paletted image, getsamples() with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one channel writes past its end. An attacker-supplied image controls the overflowing bytes through its palette.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12libimager-perlno fix listedDEBIAN-CVE-2026-102505
Debian:13libimager-perlno fix listedDEBIAN-CVE-2026-102505
Debian:14libimager-perl1.037+dfsg-2DEBIAN-CVE-2026-102505
Ubuntu:22.04:LTSlibimager-perlno fix listedUBUNTU-CVE-2026-102505
Ubuntu:24.04:LTSlibimager-perlno fix listedUBUNTU-CVE-2026-102505
Ubuntu:26.04:LTSlibimager-perlno fix listedUBUNTU-CVE-2026-102505
Ubuntu:26.10libimager-perlno fix listedUBUNTU-CVE-2026-102505

Affected products (as reported)

VendorProductVersions
Imager 0 – before 1.037

Weakness: CWE-131 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References