TONYC Imager versions prior to 1.033 for Perl incorrectly interpret unsigned EXIF IFD entry counts as signed integers. This unsigned to signed conversion error causes the software to mishandle large EXIF IFD entry count values, treating them as negative numbers. Consequently, the software attempts to allocate a memory block nearly the size of the address space, which fails and terminates the process. This denial-of-service condition can be triggered by an attacker supplying a crafted image with malicious EXIF data, causing worker process termination.

Successful exploitation results in denial of service by terminating worker processes handling image data. This can disrupt applications relying on TONYC Imager for image processing. The CVSS score of 9.8 indicates critical impact with high confidentiality, integrity, and availability consequences due to process crashes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted images with EXIF data using affected versions of TONYC Imager. Monitor vendor channels for updates and apply patches promptly once released.