CVE-2026-93019: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

As cited

Copy frozen at 2026-09-18 17:14 UTC (site build).

vulnerabilities

CVE-2026-93019: Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

CVE-2026-93019 affects Imager, a Perl image processing library, in versions before 1.036. The vulnerability causes the process to exit when reading a TGA file with a color map length of 32768 or more in the tga_palette_read function. Users of affected Imager versions should upgrade to 1.036 or later.

Why it matters: Perl developers and applications using Imager to process untrusted TGA image files face a denial of service risk; update to version 1.036 or later.

Source published

2026-09-18 16:13 UTC

First seen by Cybersecurity Tracker

2026-09-18 16:16 UTC