https://bugzilla.redhat.com/show_bug.cgi?id=2544668
Bug ID: 2544668
Summary: CVE-2026-102504 perl-Imager: perl-Imager: Denial of
Service via out-of-range channel count in raw image
reader [fedora-all]
Product: Fedora
Version: rawhide
Status: NEW
Whiteboard: {"flaws": ["ade87d04-7076-4dca-86b5-d08e7c4622ff"]}
Component: perl-Imager
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected],
[email protected], [email protected]
Blocks: 2544620 (CVE-2026-102504)
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Imager versions before 1.037 for Perl exit the process reading a raw image with
an out-of-range raw_datachannels value in i_readraw_wiol.
Nothing range-checks raw_datachannels. The line buffer is sized as the image
width times the channel count with no overflow check, so a negative or very
large count requests an excessive allocation. When it fails, Imager's allocator
calls exit(3).
Passing an untrusted raw_datachannels value to Imager->read() triggers an
uncatchable exit.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2544620
[Bug 2544620] CVE-2026-102504 perl-Imager: perl-Imager: Denial of Service via
out-of-range channel count in raw image reader
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2544668
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202544668%23c0
--
_______________________________________________
perl-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
