What is CVE-2026-13705?

CVE-2026-13705 is a high-severity vulnerability in Tonyc Imager, classified under Out-of-bounds Read. CVSS score: 7.1/10. Published 2026-07-06.

How severe is CVE-2026-13705?

High severity. CVSS v3 base score is 7.1 out of 10.

Out-of-bounds Read in Tonyc Imager

CVE-2026-13705

Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. read_rgb_16_rle guards each literal run with if (count > data_left), but count i…

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H.

Affected products

Tonyc Imager — versions 0

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

9b29abf9-4ab0-4765-b253-1875cd9b441e (patch)
9b29abf9-4ab0-4765-b253-1875cd9b441e (release-notes)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2026-13705?: CVE-2026-13705 is a high-severity vulnerability in Tonyc Imager, classified under Out-of-bounds Read. CVSS score: 7.1/10. Published 2026-07-06.
How severe is CVE-2026-13705?: High severity. CVSS v3 base score is 7.1 out of 10.