Advisories · Technology
TONYC Imager.
Every CVE that names TONYC Imager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags
- TONYC Imager
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed
- TONYC Imager
- Denial of service
- CWE-196
- CVSS 7.1 High
Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle
- TONYC Imager
- Memory corruption
- CVSS 6.5 Medium
Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files
- TONYC Imager
- Memory corruption