CVE-2026-8454 Details
Description
Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuses it across every image in the file. The page-match branch validates Image.Width + Image.Left > SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.
A heap buffer overflow vulnerability has been identified in Imager::File::GIF, all versions prior to 1.003, for Perl. This vulnerability allows an out-of-bounds write on crafted multi-frame GIF files. The issue arises in the 'i_readgif_multi_low' function, which allocates a single buffer per row sized for the GIF's global screen width. This buffer is reused across every image in the file. While the page-match branch includes a validation check before writing each line, the parallel skip-image branch fails to perform this check, allowing for the buffer overflow.
Users can upgrade to Imager::File::GIF version 1.003 to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/tonycoz/imager/commit/782e9c06cc75a0f7eed383f39522f51f44598b04.patch | CPANSec | Patch |
| https://metacpan.org/release/TONYC/Imager-File-GIF-1.003/source/Changes | CPANSec | Release Notes |
| http://www.openwall.com/lists/oss-security/2026/05/15/15 | CVE | Mailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | CPANSec |
Affected Products
| Product | Versions |
|---|---|
| tonyc imager::file::gif | < 1.003 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CPANSec |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 18, 2026 | Initial Analysis | [email protected] |
| May 15, 2026 | CVE Modified | CVE |
| May 15, 2026 | CVE Modified | CISA-ADP |
| May 15, 2026 | New CVE Received | CPANSec |