https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:23:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-319091 EUVD-2026-319091 https://cve.radiocsirt.org/vuln/euvd-2026-319091 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8454 <p>Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.</p> <p>Imager::File::GIF&#39;s i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF&#39;s global screen width &#39;SWidth&#39; and reuses it across every image in the file.</p> <p>The page-match branch validates Image.Width + Image.Left &gt; SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.</p> <p>Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.</p> <p>Imager::File::GIF&#39;s i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF&#39;s global screen width &#39;SWidth&#39; and reuses it across every image in the file.</p> <p>The page-match branch validates Image.Width + Image.Left &gt; SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8454 https://cve.radiocsirt.org/vuln/ghsa-8r2w-8p2v-h4g4 <p>Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.</p> <p>Imager::File::GIF&#39;s i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF&#39;s global screen width &#39;SWidth&#39; and reuses it across every image in the file.</p> <p>The page-match branch validates Image.Width + Image.Left &gt; SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.</p> <p>Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.</p> <p>Imager::File::GIF&#39;s i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF&#39;s global screen width &#39;SWidth&#39; and reuses it across every image in the file.</p> <p>The page-match branch validates Image.Width + Image.Left &gt; SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.</p> https://cve.radiocsirt.org/vuln/ghsa-8r2w-8p2v-h4g4