Imager::File::GIF before 1.006 allows out-of-bounds GIF reads
Original title: CVE-2026-112202: Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images
Stig Palmquist reported the Perl module issue to oss-security on October 20.
An oss-security post says Imager::File::GIF versions before 1.006 can perform out-of-bounds reads when consolidating GIF images. The October 20 note links the Metacpan distribution and the tonycoz/imager GitHub repository. The short feed text does not describe attack use or a workaround.
Unconfirmed: The snippet does not say whether the out-of-bounds read has been exploited.
- The named flaw is CVE-2026-112202.
- The affected package is the Perl Imager::File::GIF distribution.
- Fixed version stated by the title is 1.006.
Impact: Out-of-bounds reads while consolidating GIF images
| Product | Affected | Fixed in |
|---|---|---|
| Imager::File::GIF | before 1.006 | 1.006 |
- 1.Upgrade Imager::File::GIF to version 1.006.
- CVEs
- CVE-2026-112202
- Vendors
- Imager
- Products
- Imager::File::GIF
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-112202 | Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images | 6.5 | — |
From the original article
Posted by Stig Palmquist on Oct 20 ======================================================================== https://metacpan. org/dist/Imager-File-GIF https://github. com/tonycoz/imager Distribution:...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.