Heap-Based Buffer Overflow Vulnerability in Imager for Perl
CVE-2024-53901

5.5MEDIUM

Key Information:

Vendor

Imager

Status
Imager
Vendor
CVE Published:
24 November 2024

What is CVE-2024-53901?

The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.

References

https://github.com/briandfoy/cpan-security-advisory/issue...
https://github.com/briandfoy/cpan-security-advisory/issue...
https://github.com/tonycoz/imager/issues/534

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.