CVE-2026-102504Suited to automated attack · CISA

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol

CVSS score

7.5

EPSS probability

%0.4

Risk score

0.0

Published

18 d ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.8

CVE-2026-19349Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends

VendorCPANSec ProductLemonldap-NG-Portal

Patch status unknownEPSS %12 mo ago

9.8

CVE-2026-72887Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

VendorCPANSec ProductNet-OAuth

Patch verifiedEPSS %12 mo ago

9.8

CVE-2026-78183DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float

VendorCPANSec ProductDBD-Pg

Patch verifiedEPSS %11 mo ago

9.8

CVE-2026-14454Vulnerability in Tonycoz Imager

Vendortonycoz Productimager

Patch verifiedEPSS %13 mo ago

9.1

CVE-2026-73639Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

VendorCPANSec ProductImager-File-PNG+1 etkilenen

Patch verifiedEPSS %11 mo ago

9.8

CVE-2026-73193DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse

VendorCPANSec ProductDBI

Patch verifiedEPSS %12 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-102504"

Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol

Related Security News

Similar Vulnerabilities

Get this vulnerability through the API

DayBreach

Glossary & Reference

Directories & Feeds

RSS & Integration