CVE-2026-8454

MediumCVSS 5.3

Published: 15/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds write on crafted multi-frame GIF files. The per-row buffer is sized for the global screen width and reused, and the skip-image branch lacks a width check before writing.

Risk Assessment

Memory corruption and potential code execution when processing malicious GIF files.

Recommendation

Update Imager::File::GIF to a version later than 1.002.

Other vulnerabilities in Imager::File::GIF

CVE-2026-112202Medium
Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images with gif_consolidate enabled. Palette indices are used without checking the colour table's bounds, reading beyond the heap allocation.

Original NVD description (English source)

Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuses it across every image in the file. The page-match branch validates Image.Width + Image.Left > SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS