CVE-2026-14454

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-14454", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-07-02T08:18:50.542Z", "datePublished": "2026-07-08T12:30:20.230Z", "dateUpdated": "2026-07-09T14:41:45.096Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Imager", "product": "Imager", "programFiles": ["imexif.c"], "programRoutines": [{"name": "tiff_load_ifd"}], "repo": "https://github.com/tonycoz/imager", "vendor": "TONYC", "versions": [{"lessThan": "1.033", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.\n\nImager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.\n\nAn attacker could craft an image with EXIF data that terminates a worker process."}], "impacts": [{"capecId": "CAPEC-128", "descriptions": [{"lang": "en", "value": "CAPEC-128 Integer Attacks"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-196", "description": "CWE-196 Unsigned to Signed Conversion Error", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-789", "description": "CWE-789 Memory Allocation with Excessive Size Value", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-07-08T12:30:20.230Z"}, "references": [{"tags": ["release-notes"], "url": "https://metacpan.org/release/TONYC/Imager-1.033/changes"}, {"tags": ["patch"], "url": "https://github.com/tonycoz/imager/commit/06f01a5d0fd591259aeba589370d6888384a6b6d.patch"}], "solutions": [{"lang": "en", "value": "Upgrade to version 1.033 or later."}], "source": {"discovery": "UNKNOWN"}, "title": "Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/08/6"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-08T17:31:27.727Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-09T13:50:57.514385Z", "id": "CVE-2026-14454", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T14:41:45.096Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-14454", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-09T13:50:57.514385Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-07-09T13:51:20.286Z"}}], "cna": {"title": "Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-128", "descriptions": [{"lang": "en", "value": "CAPEC-128 Integer Attacks"}]}], "affected": [{"repo": "https://github.com/tonycoz/imager", "vendor": "TONYC", "product": "Imager", "versions": [{"status": "affected", "version": "0", "lessThan": "1.033", "versionType": "custom"}], "packageName": "Imager", "programFiles": ["imexif.c"], "collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "programRoutines": [{"name": "tiff_load_ifd"}]}], "solutions": [{"lang": "en", "value": "Upgrade to version 1.033 or later."}], "references": [{"url": "https://metacpan.org/release/TONYC/Imager-1.033/changes", "tags": ["release-notes"]}, {"url": "https://github.com/tonycoz/imager/commit/06f01a5d0fd591259aeba589370d6888384a6b6d.patch", "tags": ["patch"]}], "x_generator": {"engine": "cpansec-cna-tool 0.1"}, "descriptions": [{"lang": "en", "value": "Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.\n\nImager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.\n\nAn attacker could craft an image with EXIF data that terminates a worker process."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-196", "description": "CWE-196 Unsigned to Signed Conversion Error"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-789", "description": "CWE-789 Memory Allocation with Excessive Size Value"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-07-08T12:30:20.230Z"}}}, "cveMetadata": {"cveId": "CVE-2026-14454", "state": "PUBLISHED", "dateUpdated": "2026-07-08T17:31:27.727Z", "dateReserved": "2026-07-02T08:18:50.542Z", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "datePublished": "2026-07-08T12:30:20.230Z", "assignerShortName": "CPANSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Imager", "product": "Imager", "programFiles": ["imexif.c"], "programRoutines": [{"name": "tiff_load_ifd"}], "repo": "https://github.com/tonycoz/imager", "vendor": "TONYC", "versions": [{"lessThan": "1.033", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tonycoz:imager:*:*:*:*:*:perl:*:*", "matchCriteriaId": "7A93C7AC-6CF1-4A7F-A3CC-F4EA72208710", "versionEndExcluding": "1.033", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed.\n\nImager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process.\n\nAn attacker could craft an image with EXIF data that terminates a worker process."}, {"lang": "es", "value": "Las versiones de Imager anteriores a la 1.033 para Perl tratan los recuentos de entradas IFD EXIF sin signo como con signo.\n\nImager manej\u00f3 incorrectamente valores grandes de recuento de entradas IFD EXIF, trat\u00e1ndolos como n\u00fameros negativos. Esto podr\u00eda llevar a un intento de asignar un bloque casi del tama\u00f1o del espacio de direcciones, lo que falla y termina el proceso.\n\nUn atacante podr\u00eda crear una imagen con datos EXIF que termine un proceso de trabajador."}], "id": "CVE-2026-14454", "lastModified": "2026-10-25T21:10:00.770", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-14454", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-09T13:50:57.514385Z", "version": "2.0.3"}}]}, "published": "2026-07-08T13:16:30.053", "references": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Patch"], "url": "https://github.com/tonycoz/imager/commit/06f01a5d0fd591259aeba589370d6888384a6b6d.patch"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Release Notes"], "url": "https://metacpan.org/release/TONYC/Imager-1.033/changes"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/07/08/6"}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-196"}, {"lang": "en", "value": "CWE-789"}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.033)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Imager", "source": "cna", "vendor": "TONYC"}, "product": "imager", "vendor": "tonyc"}], "created": "2026-07-08T14:45:03.669937+00:00", "updated": "2026-07-31T14:00:07.204411+00:00", "vendors": ["tonyc", "tonyc$PRODUCT$imager"]}