https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:40:36.366470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319092 EUVD-2026-319092 2026-10-06T13:40:36.369279+00:00 EUVD-2026-319092 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8669 fkie_cve-2026-8669 2026-10-06T13:40:36.369311+00:00

Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.

Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuses it across every image in the file.

The page-match branch validates Image.Width + Image.Left > SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.

 https://cve.radiocsirt.org/vuln/ghsa-6275-mpwc-pq3g GHSA-6275-mpwc-pq3g 2026-10-06T13:40:36.369346+00:00

Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.

Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuses it across every image in the file.

The page-match branch validates Image.Width + Image.Left > SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8669 UBUNTU-CVE-2026-8669 2026-10-06T13:40:36.369367+00:00

Affected: Ubuntu:16.04:LTS: libimager-perl, Ubuntu:18.04:LTS: libimager-perl, Ubuntu:20.04:LTS: libimager-perl, Ubuntu:22.04:LTS: libimager-perl, Ubuntu:24.04:LTS: libimager-perl, Ubuntu:25.10: libimager-perl, Ubuntu:26.04:LTS: libimager-perl

Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuses it across every image in the file. The page-match branch validates Image.Width + Image.Left > SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.