Tony Cook

**Name of the Vulnerable Software and Affected Versions** Imager versions prior to 1.032 **Description** An issue exists in the bundled Imager::File::SGI reader where a heap out-of-bounds read occurs during the processing of a 16-bit RLE (Run-Length Encoding) literal run within the `read rgb 16 rle()` function. The function fails to correctly validate the pixel count against the remaining data length, as it does not account for the fact that each 16-bit sample requires two bytes. Consequently, a specially crafted SGI image processed via `Imager->read` can trigger an over-read that may crash the process. **Recommendations** Update to version 1.032 or later.

**Name of the Vulnerable Software and Affected Versions** Imager perl module (libimager-perl) versions 0.45 through 0.56 **Description** The issue is related to a heap-based buffer overflow in the BMP reader of the Imager perl module, which can be triggered by remote attackers using crafted 8-bit/pixel compressed BMP files. This can cause a denial of service, resulting in an application crash, and potentially allow the execution of arbitrary code. **Recommendations** For versions 0.45 through 0.56, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.