CyberRota Analysis
AI-GeneratedVersions of Imager prior to 1.037 are vulnerable to a heap buffer overflow when processing paletted images with float samples, allowing attackers to manipulate the palette of an image to write beyond allocated memory boundaries. This can lead to potential exploitation, including arbitrary code execution or application crashes. Developers and organizations utilizing Imager for image processing should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp. For a paletted image, getsamples() with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one channel writes past its end. An attacker-supplied image controls the overflowing bytes through its palette.
Related CVEs
Other vulnerabilities affecting the same vendor(s)