CVE-2026-112202: falha de média gravidade em Imager
Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.4%
Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images.
With `gif_consolidate => 1`, palette indices from the image are used without checking the colour table's bounds. The i_readgif_low routine reads beyond the heap allocation and copies the bytes into output pixels. The default GIF reader is not affected.
The same code ships bundled in the Imager distribution.
An attacker supplying a crafted GIF can disclose adjacent heap memory through the decoded output and may crash the process.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Produtos afetados
ImagerImager-File-GIFCVEs relacionadas — Imager
No mesmo produto, das mais perigosas para as menos.
CVE-2026-73639CRITICALImager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8EPSS 0.7%CVE-2026-93019CRITICALImager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_readEPSS 0.7%CVE-2026-102504HIGHImager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiolEPSS 0.4%CVE-2026-102505MEDIUMImager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fpEPSS 0.2%CVE-2026-73638MEDIUMImager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifdEPSS 0.2%CVE-2026-93018MEDIUMImager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_pEPSS 0.2%
Referências
https://github.com/tonycoz/imager/commit/dec96f12b3d8a7fd94e86264953a5e4919dd6036.patchhttps://github.com/tonycoz/imager/security/advisories/GHSA-v4hp-5h6w-9897https://metacpan.org/release/TONYC/Imager-1.040/changeshttps://metacpan.org/release/TONYC/Imager-File-GIF-1.006/changeshttp://www.openwall.com/lists/oss-security/2026/10/21/1