CVE-2026-112202

Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With gifconsolidate = 1, palette indices from the image are used without checking the colour table's bounds. The ireadgiflow routine reads beyond the heap allocation and copies the bytes into...

CVE-2026-112202

The Imager::File::GIF Perl module (versions before 1.006 ) is vulnerable to an out-of-bounds read when consolidating GIF images. Specifically, when gif_consolidate => 1 is active, the i_readgif_low routine fails to check color table bounds for palette indices, leading to reads beyond the heap ...

CVE-2026-112202 Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images

Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With gifconsolidate = 1, palette indices from the image are used without checking the colour table's bounds. The ireadgiflow routine reads beyond the heap allocation and copies the bytes into...