CVE-2026-112202

MediumCVSS 6.5

Published: 20/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 21/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images with gif_consolidate enabled. Palette indices are used without checking the colour table's bounds, reading beyond the heap allocation.

Risk Assessment

An attacker supplying a crafted GIF can disclose adjacent heap memory through the decoded output and may crash the process.

Recommendation

Update Imager::File::GIF to version 1.006 or later and avoid processing untrusted GIF files with gif_consolidate enabled.

Other vulnerabilities in Imager::File::GIF

CVE-2026-8454Medium
Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds write on crafted multi-frame GIF files. The per-row buffer is sized for the global screen width and reused, and the skip-image branch lacks a width check before writing.

Original NVD description (English source)

Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_consolidate => 1`, palette indices from the image are used without checking the colour table's bounds. The i_readgif_low routine reads beyond the heap allocation and copies the bytes into output pixels. The default GIF reader is not affected. The same code ships bundled in the Imager distribution. An attacker supplying a crafted GIF can disclose adjacent heap memory through the decoded output and may crash the process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS