Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 594
Alerts This Week
Warning Icon 1 594

Mageia Imager Critical Heap Buffer Overflow Denial Of Service 2026-0284

mageia
Calendar Grey July 20, 2026
Scroller Mageia
Security updates for Mageia fix critical Imager package vulnerabilities that can lead to denial of service.
Security update

Summary

Description: The updated package fixes security vulnerabilities: The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image. (CVE-2024-53901) Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. (CVE-2026-13705) Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. (CVE-2026-13708) Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. (CVE-2026-14454)

References

- https://bugs.mageia.org/show_bug.cgi?id=35848

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7QJU7MFFAP73YEH5YEG35EDMGSNOZ3O5/

- https://www.openwall.com/lists/oss-security/2026/07/08/6

- https://lists.security.metacpan.org/cve-announce/msg/41572386/

- https://lists.security.metacpan.org/cve-announce/msg/41637674/

- https://github.com/briandfoy/cpan-security-advisory/issues/167

- https://www.cve.org/CVERecord?id=CVE-2024-53901

- https://www.cve.org/CVERecord?id=CVE-2026-13705

- https://www.cve.org/CVERecord?id=CVE-2026-13708

- https://www.cve.org/CVERecord?id=CVE-2026-14454

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow critical Mageia heap memory

Resolution

SRPMS

- 10/core/perl-Imager-1.33.0-1.mga10

- 9/core/perl-Imager-1.19.0-2.2.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 20 Jul 2026
URL: https://advisories.mageia.org/MGASA-2026-0284.html
Type: security
CVE: CVE-2024-53901, CVE-2026-13705, CVE-2026-13708, CVE-2026-14454

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow critical Mageia heap memory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.