SixLabors

Products

ProductCVEsExploitedLatest
ImageSharp16–Oct 6, 2026

Exploited and recent CVEs

  • CVE-2026-106118 High 7.5 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write 0.6%
  • CVE-2026-106117 High 7.5 ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp 0.4%
  • CVE-2026-106116 Medium 5.3 ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop 0.3%
  • CVE-2026-106115 High 7.5 ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer 0.4%
  • CVE-2026-106114 Medium 5.3 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions 0.3%
  • CVE-2026-106113 High 7.5 ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index 0.4%
  • CVE-2026-106112 High 7.5 ImageSharp: ICC LUT16 output channel count can write beyond Vector4 0.4%
  • CVE-2026-106111 Medium 5.9 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate 0.3%
  • CVE-2026-106110 High 7.5 ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer 0.4%
  • CVE-2025-54575 Medium 5.3 ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks 0.4%
  • CVE-2025-27598 High 7.5 Out-of-bounds Write in SixLabors ImageSharp 0.6%
  • CVE-2024-41132 Medium 5.3 SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder 0.8%
  • CVE-2024-41131 High 7.5 Out-of-bounds Write in SixLabors ImageSharp 0.7%
  • CVE-2024-32036 Medium 5.3 SixLabors.ImageSharp vulnerable to data leakage 0.6%
  • CVE-2024-32035 Medium 5.3 Memory Allocation with Excessive Size Value in SixLabors.ImageSharp 0.6%
  • CVE-2024-27929 High 7.1 Use After Free in SixLabors.ImageSharp 0.4%