TONYC Imager versions prior to 1.033 for Perl incorrectly handle unsigned EXIF IFD entry counts by interpreting them as signed integers. This leads to a scenario where large EXIF IFD entry counts are treated as negative values, causing the software to attempt allocation of a memory block nearly the size of the address space. The allocation fails and causes the process to terminate unexpectedly. This vulnerability allows an attacker to craft an image with malicious EXIF data that can terminate a worker process, resulting in a denial of service condition.

The vulnerability causes a denial of service by terminating the worker process handling the image. There is no indication of code execution or data corruption beyond process termination. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted images with EXIF data or implement input validation to detect and reject images with unusually large EXIF IFD entry counts.