CVE-2026-93019
Weakness: CWE-196
- Track*
- CVSS 9.1 Critical
What it is
ReportedImager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tga_palette_read() casts that value to size_t and asks mymalloc() for a size near SIZE_MAX. The allocation fails and Imager's allocator calls exit(3). Reading an attacker-supplied file through Imager->read() triggers an uncatchable exit.
Dates
What is affected
Not reportedNot reported by tracked sources.
Urgency and basis
Tracker computedTrack*
Current priority score and EPSS: loading from the tracker record. They are read when this page loads and are not shown without JavaScript. They change daily and are not part of "Source last updated".
Dates
Exploitation evidence
Not reportedNot reported by tracked sources.
What to do
ReportedA source remediation link is available. Validate that guidance against the affected product and your environment.
Source remediation ↗Dates
Detection and validation
Mapped metadata availability only. These signals do not change priority.
Sigma, Atomic, Nuclei, and Metasploit: none mapped by tracked sources.
Sigma
Not mapped by tracked sources.
Atomic
Not mapped by tracked sources.
Nuclei
Not mapped by tracked sources.
Evidence detail
Loading the full tracker evidence record…