CVE-2026-14454

Name of the Vulnerable Software and Affected Versions Imager versions prior to 1.033

Description Imager for Perl incorrectly treats unsigned EXIF IFD (Image File Directory) entry counts as signed. When processing large entry count values, the software interprets them as negative numbers, which can lead to an attempt to allocate a memory block nearly the size of the address space. This failure results in the termination of the worker process. An attacker can exploit this by providing a specially crafted image containing malicious EXIF data.

Recommendations Update to version 1.033.