CVE-2026-13705: Imager 0 to before 1.032

Affected technology

Imager · 0 to before 1.032
TONYC

Description’s affected range: versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle guards each literal run with if (count > data_left)

Component: Not specified by the source
Function: read_rgb_16_rle
File: SGI/imsgi.c

Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.