TONYC vulnerabilities
We track 4 vulnerabilities in TONYC products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
Latest TONYC vulnerabilities
- 7.5 High severity
Imager: Out-of-bounds Read
Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags. copy_string_tags() computes an ASCII EXIF tag's length as `entry->size - 1` to strip the trailing N
- 9.8 Critical severity
Imager: Unsigned to Signed Conversion Error
Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space
- 7.5 High severity
Imager::File::JPEG: Missing Release of Memory after Effective Lifetime
Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with *iptc_itext = m
- 7.1 High severity
Imager: Out-of-bounds Read
Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle guards each literal run with if (count > data_left), but count is a pixel count while