CriticalFix available
libimager-perl — security advisory
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.
- Products
- libimager-perl
- Affected versions
- 1.019+dfsg-1, 1.019+dfsg-2, 1.020+dfsg-1, 1.022+dfsg-1, 1.023+dfsg-1, 1.024+dfsg-1, 1.024+dfsg-2, 1.025+dfsg-1, 1.027+dfsg-1, 1.028+dfsg-1, 1.029+dfsg-1, 1.030+dfsg-1, 1.031+dfsg-1, 1.032+dfsg-1, 1.033+dfsg-1, 1.034+dfsg-1, 1.034+dfsg-2, 1.035+dfsg-1, 1.036+dfsg-1, 1.037+dfsg-1, 1.037+dfsg-2, 1.040+dfsg-1
- Fixed versions
- 1.033+dfsg-1
- CVEs
- CVE-2026-14454
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 13:59 UTC · Revision 2
Source evidence
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.
osv:DEBIAN-CVE-2026-14454
libimager-perl
Fixed versions: Not specified
libimager-perl
Fixed versions: Not specified
libimager-perl
Fixed versions: 1.033+dfsg-1
Complete source record
{
"id": "71e92160c294dcc01d97f31131d577ab5b45c6c5789bfacc85309692f06c7b43",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2026-14454",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2026-14454",
"summary": "Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.",
"evidence": "osv:DEBIAN-CVE-2026-14454",
"products": [
{
"name": {
"value": "libimager-perl",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.019+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.019+dfsg-2",
"evidence": "/affected/0/versions"
},
{
"value": "1.020+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.022+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.023+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.024+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.024+dfsg-2",
"evidence": "/affected/0/versions"
},
{
"value": "1.025+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.027+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.028+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.029+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.030+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.031+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.032+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.033+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.034+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.034+dfsg-2",
"evidence": "/affected/0/versions"
},
{
"value": "1.035+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.036+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.037+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.037+dfsg-2",
"evidence": "/affected/0/versions"
},
{
"value": "1.040+dfsg-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "libimager-perl",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.027+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.028+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.029+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.030+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.031+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.032+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.033+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.034+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.034+dfsg-2",
"evidence": "/affected/1/versions"
},
{
"value": "1.035+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.036+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.037+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.037+dfsg-2",
"evidence": "/affected/1/versions"
},
{
"value": "1.040+dfsg-1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "libimager-perl",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.033+dfsg-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "1.027+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "1.028+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "1.029+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "1.030+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "1.031+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "1.032+dfsg-1",
"evidence": "/affected/2/versions"
}
]
}
],
"severity": "critical",
"structured": {
"id": "DEBIAN-CVE-2026-14454",
"aliases": [
"DEBIAN-CVE-2026-14454"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libimager-perl",
"purl": "pkg:deb/debian/libimager-perl?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"1.019+dfsg-1",
"1.019+dfsg-2",
"1.020+dfsg-1",
"1.022+dfsg-1",
"1.023+dfsg-1",
"1.024+dfsg-1",
"1.024+dfsg-2",
"1.025+dfsg-1",
"1.027+dfsg-1",
"1.028+dfsg-1",
"1.029+dfsg-1",
"1.030+dfsg-1",
"1.031+dfsg-1",
"1.032+dfsg-1",
"1.033+dfsg-1",
"1.034+dfsg-1",
"1.034+dfsg-2",
"1.035+dfsg-1",
"1.036+dfsg-1",
"1.037+dfsg-1",
"1.037+dfsg-2",
"1.040+dfsg-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-14454.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libimager-perl",
"purl": "pkg:deb/debian/libimager-perl?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"1.027+dfsg-1",
"1.028+dfsg-1",
"1.029+dfsg-1",
"1.030+dfsg-1",
"1.031+dfsg-1",
"1.032+dfsg-1",
"1.033+dfsg-1",
"1.034+dfsg-1",
"1.034+dfsg-2",
"1.035+dfsg-1",
"1.036+dfsg-1",
"1.037+dfsg-1",
"1.037+dfsg-2",
"1.040+dfsg-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-14454.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.033+dfsg-1"
}
]
}
],
"package": {
"name": "libimager-perl",
"purl": "pkg:deb/debian/libimager-perl?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"1.027+dfsg-1",
"1.028+dfsg-1",
"1.029+dfsg-1",
"1.030+dfsg-1",
"1.031+dfsg-1",
"1.032+dfsg-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-14454.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T12:02:56.871817667Z",
"provider": "osv",
"upstream": [
"CVE-2026-14454"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2026-14454"
]
},
"related_cves": [
{
"value": "CVE-2026-14454",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 453013,
"published_at": "2026-07-08T13:16:30.053+00:00"
}