Security Advisories (5)
CVE-2016-1238 (2016-08-02)

Imager would search the default current directory entry in @INC when searching for file format support modules.

CPANSA-Imager-2014-01 (2014-01-03)

When drawing on an image with an alpha channel where the source minimum is greater than zero, Imager would read from beyond the end of a malloc() allocated buffer. In rare circumstances this could lead to some of the source image not being written to the target image, or possibly to a segmentation fault.

CVE-2007-2459 (2007-05-02)

Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.

CVE-2006-0053 (2006-04-10)

Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by writing a 2- or 4-channel JPEG image (or a 2-channel TGA image) to a scalar, which triggers a NULL pointer dereference.

CVE-2024-53901 (2024-11-17)

"invalid next size" backtrace on use of trim on certain images

Changes for version 0.37

  • iolayer:
  • Add scalar/mmap to iolayer
  • Add close() code to iolayer
  • Merge callback interface into iolayer
  • Add interface for writing to all formats but tiff
  • Add interface for reading for png (started), gif (merge with cb patch), ppm and raw
  • Add make new tests once all formats support io_layer
  • Implment the maxread threshold (Indicates how far a library can read before it indicates that it's done).
  • MultiImage & metadata support:
  • Figure what interface should be between C and perl?
  • How to store data in the C interface for tags/metadata?
  • Old sins:
  • Make sure everything is doable with the OO interface
  • Split the other classes into seperate files
  • Compile with memory debugging enabled and fix leaks
  • Check if hashbox code is choosing the wrong closest color
  • Documentation:
  • Add to the documentation
  • Write a tutorial?
  • Write a guide to installing the helper libraries
  • Go through the entire project and add comments in pod so doco.perl can be used to read them.
  • For latest versions check the Imager-devel pages: http://www.eecs.umich.edu/~addi/perl/Imager/devel/

Documentation

documents the register virtual machine used by Imager::transform2().

Modules

Perl extension for Generating 24 bit Images
implements expression parsing and compilation for the expression evaluation engine used by Imager::transform2()
generated information about the register based VM

Provides

in Imager.pm
in lib/Imager/Expr.pm
in lib/Imager/Expr.pm
in Imager.pm