As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-93018: Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p
Imager, a Perl image processing library, contains a vulnerability in versions before 1.036 that discloses uninitialized heap memory when reading paletted images with pixel indexes beyond the color map bounds. The flaw affects the i_gpix_p and i_glin_p functions.
Why it matters: Perl developers using Imager to process untrusted paletted image files face potential information disclosure; upgrade to version 1.036 or later.
- Source published
- First seen by Cybersecurity Tracker