Is CVE-2026-112202 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-112202 being exploited in the wild.

How severe is CVE-2026-112202?

Informational severity, published 20 October 2026.

Which products and versions are affected?

Tony Cook Imager versions with bundled GIF code before the patch date; Tony Cook Imager::File::GIF before 1.006.

Is there a fix for CVE-2026-112202?

Yes: fixed in Imager::File::GIF 1.006 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-112202 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-112202?

Check whether you run Tony Cook Imager or Tony Cook Imager::File::GIF at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-112202: Imager::File::GIF out-of-bounds read in GIF consolidation

CVE-2026-112202 · Severity: info · Published 2026-10-20

Imager::File::GIF is a Perl library for reading and manipulating image files, including GIF format. When processing GIF images with the consolidation feature enabled, an attacker can craft a malicious GIF file to read memory from the application's heap and potentially crash the process. This could lead to information disclosure or denial of service.

Technologies: Tony Cook Imager, Tony Cook Imager::File::GIF. Vendors: Tony Cook.

Quick answers

Is CVE-2026-112202 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-112202 being exploited in the wild.
How severe is CVE-2026-112202?: Informational severity, published 20 October 2026.
Which products and versions are affected?: Tony Cook Imager versions with bundled GIF code before the patch date; Tony Cook Imager::File::GIF before 1.006.
Is there a fix for CVE-2026-112202?: Yes: fixed in Imager::File::GIF 1.006 and later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-112202 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-112202?: Check whether you run Tony Cook Imager or Tony Cook Imager::File::GIF at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Imager::File::GIF 1.006 and later

Technical details

An out-of-bounds read vulnerability exists in the i_readgif_low routine when gif_consolidate is enabled. Palette indices from a GIF image are used without bounds checking against the color table, allowing reads beyond the allocated heap buffer. The vulnerability affects Imager::File::GIF as a standalone module and the bundled GIF reader in the Imager distribution; the default GIF reader without consolidation is not affected.

Affected products

Tony Cook Imager::File::GIF before 1.006
Tony Cook Imager versions with bundled GIF code before the patch date

Timeline

2026-10-20: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.