/ 
Imager-1.032
⭐ Starred 27 / Imager::Filter::Mandelbrot
Security Advisories (2)
CVE-2026-14454 (2026-07-08)

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.

CVE-2026-19082 (2026-08-07)

Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy_string_tags. copy_string_tags() computes an ASCII EXIF tag's length as `entry->size - 1` to strip the trailing NUL. A zero-count ASCII entry sets `entry->size` to 0, and the derived length reaches i_tags_add() as -1, which is interpreted as a request to call strlen(), scanning past the entry to the next NUL and copying those bytes into the tag. JPEG reaches this path via im_decode_exif(), as does the separate Imager::File::WEBP distribution, which is fixed by upgrading Imager. Any caller of Imager->read() on an attacker-supplied image with such an entry may receive an exif_* tag holding adjacent heap bytes instead of an empty string.

NAME

Imager::Filter::Mandelbrot - filter that renders the Mandelbrot set.

SYNOPSIS

use Imager;
use Imager::Filter::Mandelbrot;

$img->filter(type=>'mandelbrot', ...);

DESCRIPTION

This is a expansion of the mandelbrot dynamically loadable filter provided in dynfilt in previous releases of Imager.

Valid filter parameters are:

  • minx, maxx - the range of x values to render. Defaults: -2.5, 1.5.

  • miny, maxy - the range of y values to render. Defaults: -1.5, 1.5

  • maxiter - the maximum number of iterations to perform when checking if the sequence tend towards infinity.

AUTHOR

Original by Arnar M. Hrafnkelsson.

Adapted and expanded by Tony Cook <tonyc@cpan.org>

SEE ALSO

Imager, Imager::Filters.