CVE-2026-73638: Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd

As cited

Copy frozen at 2026-09-18 01:36 UTC (site build).

vulnerabilities

CVE-2026-73638: Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd

CVE-2026-73638 affects Imager, a Perl image processing module, in versions 0.45_02 through 1.034. The vulnerability allows reading outside the EXIF block due to unchecked start offsets in the tiff_load_ifd function when processing TIFF files.

Why it matters: Developers and systems using Imager to process untrusted TIFF images face potential information disclosure; upgrade to version 1.035 or later.

Source published

2026-09-17 22:06 UTC

First seen by Cybersecurity Tracker

2026-09-18 00:19 UTC