How severe is CVE-2026-14454?

CVE-2026-14454 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2026-14454 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (50th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-14454?

CVE-2026-14454 affects Tonycoz Imager. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-14454?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2026-14454 published?

CVE-2026-14454 was published on 2026-07-08 and last updated on 2026-07-10.

CVE-2026-14454

CVE-2026-14454 is a critical-severity vulnerability in Tonycoz Imager with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-196.

Key facts

Severity: Critical (CVSS 3.x base score 9.8)
EPSS exploit prediction: 1% (50th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-196
Affected product: Tonycoz Imager
Published: 2026-07-08
Last modified: 2026-07-10

Description

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.

Frequently asked questions

What is CVE-2026-14454?: Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Imager mishandled large EXIF IFD entry count values, treating them as negative numbers. This could lead to an attempt to allocate a block nearly the size of the address space, which fails and kills the process. An attacker could craft an image with EXIF data that terminates a worker process.
How severe is CVE-2026-14454?: CVE-2026-14454 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2026-14454 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (50th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-14454?: CVE-2026-14454 affects Tonycoz Imager. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-14454?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2026-14454 published?: CVE-2026-14454 was published on 2026-07-08 and last updated on 2026-07-10.

References

Affected products (1)

cpe:2.3:a:tonycoz:imager:*:*:*:*:*:perl:*:*

More vulnerabilities in Tonycoz Imager

CVE-2024-53901 — Medium (CVSS 5.5): The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly…

All CVEs affecting Tonycoz Imager →

Other CWE-196 vulnerabilities

CVE-2026-93019 — Critical (CVSS 9.1): Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in…
CVE-2026-58317 — Medium (CVSS 6.3): Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm…
CVE-2026-34155 — Medium (CVSS 5.3): RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain'…

Browse all CWE-196 vulnerabilities →