Vulnerability Details CVE-2026-102505
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp.
For a paletted image, getsamples() with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one channel writes past its end.
An attacker-supplied image controls the overflowing bytes through its palette.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 14.1%
CVSS Severity
CVSS v3 Score 6.3
Products affected by CVE-2026-102505
-
cpe:2.3:a:tonycoz:imager:-
-
cpe:2.3:a:tonycoz:imager:0.47
-
cpe:2.3:a:tonycoz:imager:0.48
-
cpe:2.3:a:tonycoz:imager:0.49
-
cpe:2.3:a:tonycoz:imager:0.50
-
cpe:2.3:a:tonycoz:imager:0.51
-
cpe:2.3:a:tonycoz:imager:0.52
-
cpe:2.3:a:tonycoz:imager:0.53
-
cpe:2.3:a:tonycoz:imager:0.54
-
cpe:2.3:a:tonycoz:imager:0.55
-
cpe:2.3:a:tonycoz:imager:0.56
-
cpe:2.3:a:tonycoz:imager:0.57
-
cpe:2.3:a:tonycoz:imager:0.58
-
cpe:2.3:a:tonycoz:imager:0.59
-
cpe:2.3:a:tonycoz:imager:0.60
-
cpe:2.3:a:tonycoz:imager:0.61
-
cpe:2.3:a:tonycoz:imager:0.63
-
cpe:2.3:a:tonycoz:imager:0.64
-
cpe:2.3:a:tonycoz:imager:0.65
-
cpe:2.3:a:tonycoz:imager:0.71
-
cpe:2.3:a:tonycoz:imager:0.72
-
cpe:2.3:a:tonycoz:imager:0.74
-
cpe:2.3:a:tonycoz:imager:0.75
-
cpe:2.3:a:tonycoz:imager:0.76
-
cpe:2.3:a:tonycoz:imager:0.77
-
cpe:2.3:a:tonycoz:imager:0.78
-
cpe:2.3:a:tonycoz:imager:0.79
-
cpe:2.3:a:tonycoz:imager:0.80
-
cpe:2.3:a:tonycoz:imager:0.81
-
cpe:2.3:a:tonycoz:imager:0.82
-
cpe:2.3:a:tonycoz:imager:0.83
-
cpe:2.3:a:tonycoz:imager:0.84
-
cpe:2.3:a:tonycoz:imager:0.85
-
cpe:2.3:a:tonycoz:imager:0.86
-
cpe:2.3:a:tonycoz:imager:0.87
-
cpe:2.3:a:tonycoz:imager:0.88
-
cpe:2.3:a:tonycoz:imager:0.89
-
cpe:2.3:a:tonycoz:imager:0.90
-
cpe:2.3:a:tonycoz:imager:0.91
-
cpe:2.3:a:tonycoz:imager:0.92
-
cpe:2.3:a:tonycoz:imager:0.93
-
cpe:2.3:a:tonycoz:imager:0.94
-
cpe:2.3:a:tonycoz:imager:0.95
-
cpe:2.3:a:tonycoz:imager:0.96
-
cpe:2.3:a:tonycoz:imager:0.97
-
cpe:2.3:a:tonycoz:imager:0.98
-
cpe:2.3:a:tonycoz:imager:0.99
-
cpe:2.3:a:tonycoz:imager:1.000
-
cpe:2.3:a:tonycoz:imager:1.001
-
cpe:2.3:a:tonycoz:imager:1.002
-
cpe:2.3:a:tonycoz:imager:1.003
-
cpe:2.3:a:tonycoz:imager:1.004
-
cpe:2.3:a:tonycoz:imager:1.005
-
cpe:2.3:a:tonycoz:imager:1.006
-
cpe:2.3:a:tonycoz:imager:1.007
-
cpe:2.3:a:tonycoz:imager:1.008
-
cpe:2.3:a:tonycoz:imager:1.009
-
cpe:2.3:a:tonycoz:imager:1.010
-
cpe:2.3:a:tonycoz:imager:1.011
-
cpe:2.3:a:tonycoz:imager:1.012
-
cpe:2.3:a:tonycoz:imager:1.013
-
cpe:2.3:a:tonycoz:imager:1.014
-
cpe:2.3:a:tonycoz:imager:1.015
-
cpe:2.3:a:tonycoz:imager:1.016
-
cpe:2.3:a:tonycoz:imager:1.017
-
cpe:2.3:a:tonycoz:imager:1.018
-
cpe:2.3:a:tonycoz:imager:1.019
-
cpe:2.3:a:tonycoz:imager:1.020
-
cpe:2.3:a:tonycoz:imager:1.021
-
cpe:2.3:a:tonycoz:imager:1.022
-
cpe:2.3:a:tonycoz:imager:1.023
-
cpe:2.3:a:tonycoz:imager:1.024
-
cpe:2.3:a:tonycoz:imager:1.025