VYPR

Imager

by Perl Foundation

CVEs (2)

  • CVE-2024-53901MedNov 24, 2024
    risk 0.36cvss 5.5epss 0.00

    The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.

  • CVE-2026-8669MedMay 15, 2026
    risk 0.35cvss 6.5epss 0.00

    Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuses it across every image in…