Live › vulnerability › CVE-2026-112202
Go to dashboardImager::File::GIF before 1.006 for Perl reads past a heap buffer when consolidating GIF palettes with gif_consolidate enabled. A crafted GIF can leak adjacent heap bytes into decoded output or crash the process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only code that reads GIF files with the gif_consolidate option turned on is exposed, and only when it reads images an outside party can supply. The default GIF reader is not affected, so services that never set gif_consolidate can skip it. Teams that run Perl image-processing pipelines on user uploads should check their Imager version.
No product ranges from the sources yet.
perl -MImager::File::GIF -e 'print $Imager::File::GIF::VERSION' to read the installed versiongif_consolidate set to a true value1.006 or latergif_consolidate => 1 when reading GIFsEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images.
With gif_consolidate => 1, palette indices from the image are used without checking the colour table's bounds. The i_readgif_low routine reads beyond the heap allocation and copies the bytes into output pixels. The default GIF reader is not affected.
The same code ships bundled in the Imager distribution.
An attacker supplying a crafted GIF can disclose adjacent heap memory through the decoded output and may crash the process.
This page as .md · .json · in your agent: get_signal("CVE-2026-112202")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.