一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月2日

CVE-2026-102504 – Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-

未分类
📑 文章目录

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol.

Nothing range-checks raw_datachannels. The line buffer is sized as the image width times the channel count with no overflow check, so a negative or very large count requests an excessive allocation. When it fails, Imager’s allocator calls exit(3).

Passing an untrusted raw_datachannels value to Imager->read() triggers an uncatchable exit.