A heap out‑of‑bounds read occurs when Imager processes a malformed SGI file containing a 16‑bit RLE literal run. The guard only checks pixel count, while each pixel consumes two bytes; thus a run that requires more bytes than remain leads to an over‑read before the parser rejects the image. The interpreter process crashes. No evidence suggests this flaw can be used for code execution or data disclosure; it simply results in a denial‑of‑service.

The vulnerability affects the TONYC Imager Perl module in versions earlier than 1.032. Any Perl application that imports Imager and reads SGI image files—including web front‑ends, image conversion utilities, image files—can be impacted. Based on the description, it is inferred that the flaw is triggered only when the SGI image contains a malformed 16‑bit RLE literal run; applications that validate or sanitize input images might avoid exploitation.

The CVSS score of 7.1 indicates moderate‑to‑high severity. The EPSS score of < 1% reflects a very low probability of exploitation. The flaw is not listed in the CISA KEV catalog. The likely attack vector is the delivery of a crafted SGI image to a running application that uses Imager to read files, such as via file upload or network transfer. Because the flaw only results in a crash without granting code execution or privilege escalation, the risk is limited to service disruption rather than compromise of the system.