by Kastro
Paper/Archive/CVE-2026-3031

CVE-2026-3031

TOKUHIROM Image::EPEG — Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.3.533 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. Image::EPEG includes Epeg 0.9.0 that was last updated in 2004. Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project.

Affected

ProductAffectedFixed inSource
Image::EPEG≤ 0.15–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbackpan.metacpan.org/authors/id/T/TO/TOKUHIROM/Image-Epeg-0.15.readmerefbackpan.metacpan.org/authors/id/T/TO/TOKUHIROM/Image-Epeg-0.15.tar.gzrefsourceforge.net/projects/enlightenment/files/OldFiles/epeg-0.9.0.tar.gz/download