CVE-2026-102505

Name of the Vulnerable Software and Affected Versions Imager for Perl versions prior to 1.037

Description A heap buffer overflow occurs when fetching float samples from a paletted image within the i gsampf fp function. When the getsamples() function is used with the type float for a paletted image, it allocates a buffer for only one sample per pixel. If more than one channel is requested, the process writes data beyond the buffer boundary. An attacker can control the overflowing bytes by providing a specially crafted image palette.

Recommendations Update Imager for Perl to version 1.037 or later.