PT-2026-55932 · Tonyc · Imager::File::Jpeg
Published
2026-07-06
·
Updated
2026-07-06
·
CVE-2026-13708
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i readjpeg wiol.
i readjpeg wiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with *iptc itext = mymalloc(...) and overwrites the previous pointer without freeing it. Only the final payload is later turned into a Perl scalar and freed, so a JPEG with N such markers leaks the first N-1 payloads on every read.
In a long-lived process, such as an upload or thumbnailing service, repeated reads accumulate these leaks and exhaust available memory, a denial of service.
The same handler ships bundled in the Imager distribution, where versions before 1.032 are affected and the fix ships in 1.032.
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Imager::File::Jpeg