What’s Vulnerable › Vulnerabilities

CVE-2026-93019: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-18 · updated 2026-09-18
• Weakness: CWE-196

Description

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tga_palette_read() casts that value to size_t and asks mymalloc() for a size near SIZE_MAX. The allocation fails and Imager's allocator calls exit(3). Reading an attacker-supplied file through Imager->read() triggers an uncatchable exit.

References

• https://github.com/tonycoz/imager/commit/74ed50e0625f9f51054e595bb4a8da92c1e0d571.patch
• https://github.com/tonycoz/imager/security/advisories/GHSA-p4vw-rc54-p2c2
• https://metacpan.org/release/TONYC/Imager-1.036/changes
• http://www.openwall.com/lists/oss-security/2026/09/18/9
• https://github.com/tonycoz/imager/security/advisories/GHSA-p4vw-rc54-p2c2

Get alerted when CVE-2026-93019 or the next vulnerability affects your stack