VYPR

Imager

by RubyGems

Source repositories

CVEs (1)

  • CVE-2026-13708HigJul 6, 2026
    risk 0.42cvss 7.5epss 0.00

    Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with *iptc_itext = mymalloc(...) and…