CyberRota Analysis
AI-GeneratedImager versions prior to 1.033 for Perl are vulnerable due to improper handling of large EXIF IFD entry counts, which are incorrectly treated as signed integers. This flaw can lead to a denial-of-service condition by causing the application to attempt to allocate excessive memory, resulting in process termination. Organizations using affected versions should prioritize patching to mitigate potential disruptions from crafted image files.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.
Related CVEs
Other vulnerabilities affecting the same vendor(s)