Is CVE-2026-8669 actively exploited?

No active exploitation of CVE-2026-8669 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-8669 be exploited remotely?

Yes. CVE-2026-8669 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-8669?

CVE-2026-8669 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2026-8669

MEDIUM

CVE-2026-8669

CWE-787Published: May 15, 2026· Updated: May 18, 2026

6.5

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.9th

Official Description

Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.

Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized for the GIF's global screen width 'SWidth' and reuses it across every image in the file.

The page-match branch validates Image.Width + Image.Left > SWidth before each DGifGetLine write, but the parallel skip-image branch at imgif.c:790-805 calls DGifGetLine(GifFile, GifRow, Width) with no such check.

NVD Source

Technical Analysis

CVE-2026-8669 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-787): Out-of-bounds write vulnerabilities can lead to data corruption, crashes, or arbitrary code execution.