Vulnerability Details CVE-2026-102504
Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol.
Nothing range-checks raw_datachannels. The line buffer is sized as the image width times the channel count with no overflow check, so a negative or very large count requests an excessive allocation. When it fails, Imager's allocator calls exit(3).
Passing an untrusted raw_datachannels value to Imager->read() triggers an uncatchable exit.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 31.2%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-102504
-
cpe:2.3:a:tonycoz:imager:-
-
cpe:2.3:a:tonycoz:imager:0.47
-
cpe:2.3:a:tonycoz:imager:0.48
-
cpe:2.3:a:tonycoz:imager:0.49
-
cpe:2.3:a:tonycoz:imager:0.50
-
cpe:2.3:a:tonycoz:imager:0.51
-
cpe:2.3:a:tonycoz:imager:0.52
-
cpe:2.3:a:tonycoz:imager:0.53
-
cpe:2.3:a:tonycoz:imager:0.54
-
cpe:2.3:a:tonycoz:imager:0.55
-
cpe:2.3:a:tonycoz:imager:0.56
-
cpe:2.3:a:tonycoz:imager:0.57
-
cpe:2.3:a:tonycoz:imager:0.58
-
cpe:2.3:a:tonycoz:imager:0.59
-
cpe:2.3:a:tonycoz:imager:0.60
-
cpe:2.3:a:tonycoz:imager:0.61
-
cpe:2.3:a:tonycoz:imager:0.63
-
cpe:2.3:a:tonycoz:imager:0.64
-
cpe:2.3:a:tonycoz:imager:0.65
-
cpe:2.3:a:tonycoz:imager:0.71
-
cpe:2.3:a:tonycoz:imager:0.72
-
cpe:2.3:a:tonycoz:imager:0.74
-
cpe:2.3:a:tonycoz:imager:0.75
-
cpe:2.3:a:tonycoz:imager:0.76
-
cpe:2.3:a:tonycoz:imager:0.77
-
cpe:2.3:a:tonycoz:imager:0.78
-
cpe:2.3:a:tonycoz:imager:0.79
-
cpe:2.3:a:tonycoz:imager:0.80
-
cpe:2.3:a:tonycoz:imager:0.81
-
cpe:2.3:a:tonycoz:imager:0.82
-
cpe:2.3:a:tonycoz:imager:0.83
-
cpe:2.3:a:tonycoz:imager:0.84
-
cpe:2.3:a:tonycoz:imager:0.85
-
cpe:2.3:a:tonycoz:imager:0.86
-
cpe:2.3:a:tonycoz:imager:0.87
-
cpe:2.3:a:tonycoz:imager:0.88
-
cpe:2.3:a:tonycoz:imager:0.89
-
cpe:2.3:a:tonycoz:imager:0.90
-
cpe:2.3:a:tonycoz:imager:0.91
-
cpe:2.3:a:tonycoz:imager:0.92
-
cpe:2.3:a:tonycoz:imager:0.93
-
cpe:2.3:a:tonycoz:imager:0.94
-
cpe:2.3:a:tonycoz:imager:0.95
-
cpe:2.3:a:tonycoz:imager:0.96
-
cpe:2.3:a:tonycoz:imager:0.97
-
cpe:2.3:a:tonycoz:imager:0.98
-
cpe:2.3:a:tonycoz:imager:0.99
-
cpe:2.3:a:tonycoz:imager:1.000
-
cpe:2.3:a:tonycoz:imager:1.001
-
cpe:2.3:a:tonycoz:imager:1.002
-
cpe:2.3:a:tonycoz:imager:1.003
-
cpe:2.3:a:tonycoz:imager:1.004
-
cpe:2.3:a:tonycoz:imager:1.005
-
cpe:2.3:a:tonycoz:imager:1.006
-
cpe:2.3:a:tonycoz:imager:1.007
-
cpe:2.3:a:tonycoz:imager:1.008
-
cpe:2.3:a:tonycoz:imager:1.009
-
cpe:2.3:a:tonycoz:imager:1.010
-
cpe:2.3:a:tonycoz:imager:1.011
-
cpe:2.3:a:tonycoz:imager:1.012
-
cpe:2.3:a:tonycoz:imager:1.013
-
cpe:2.3:a:tonycoz:imager:1.014
-
cpe:2.3:a:tonycoz:imager:1.015
-
cpe:2.3:a:tonycoz:imager:1.016
-
cpe:2.3:a:tonycoz:imager:1.017
-
cpe:2.3:a:tonycoz:imager:1.018
-
cpe:2.3:a:tonycoz:imager:1.019
-
cpe:2.3:a:tonycoz:imager:1.020
-
cpe:2.3:a:tonycoz:imager:1.021
-
cpe:2.3:a:tonycoz:imager:1.022
-
cpe:2.3:a:tonycoz:imager:1.023
-
cpe:2.3:a:tonycoz:imager:1.024
-
cpe:2.3:a:tonycoz:imager:1.025