Tony Cook

**Name of the Vulnerable Software and Affected Versions** Imager perl module (libimager-perl) versions 0.45 through 0.56 **Description** The issue is related to a heap-based buffer overflow in the BMP reader of the Imager perl module, which can be triggered by remote attackers using crafted 8-bit/pixel compressed BMP files. This can cause a denial of service, resulting in an application crash, and potentially allow the execution of arbitrary code. **Recommendations** For versions 0.45 through 0.56, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.