Imager::File::JPEG vulnerabilities

1 known vulnerability in Imager::File::JPEG from TONYC. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Imager::File::JPEG: Missing Release of Memory after Effective Lifetime

  CVE-2026-13708Jul 6, 2026TONYC

  Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. i_readjpeg_wiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with *iptc_itext = m