CVE-2026-3031
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
The Perl library Image::EPEG up to version 0.15 includes an unsupported version of the Epeg library (0.9.0), which has not been updated since 2004. Using outdated software may expose unpatched security vulnerabilities.
Risk Assessment
The organization risks exploitation of known vulnerabilities in the outdated Epeg library, potentially leading to data integrity breaches or arbitrary code execution.
Recommendation
Immediately update Image::EPEG to the latest version or replace it with an alternative JPEG library that uses a current and supported version of Epeg.
Original NVD description (English source)
Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. Image::EPEG includes Epeg 0.9.0 that was last updated in 2004. Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project.