Cyber ·
CVE-2026-112202: out-of-bounds read in Imager::File::GIF for Perl
CPAN Security Group advisory on a flaw in Imager::File::GIF before version 1.006, causing out-of-bounds reads when consolidating GIF images.
The CPAN Security Group registered CVE-2026-112202 for the Imager-File-GIF distribution, in versions before 1.006. According to the advisory, the flaw allows out-of-bounds reads during GIF image consolidation. The item reached the oss-sec feed and was posted on 20 October by Stig Palmquist; the record is dated 21 October 2026 in the source. The advisory lists the MetaCPAN distribution and the Imager project code repository as references. To verify, read the full original advisory and the references it cites, and confirm the installed version. Relevance: anyone using this library in Perl to process images in their own pipelines should assess exposure and upgrade to version 1.006 or later. This flaw does not directly affect the Rota Nacional platform, and no Rota feature fixes third-party libraries.