SixLabors ImageSharp vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20252
3. 20269

Newest CVEs

• CVE-2026-106118

  ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

  SixLabors · ImageSharp

  High7.5
• CVE-2026-106117

  ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

  SixLabors · ImageSharp

  High7.5
• CVE-2026-106116

  ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop

  SixLabors · ImageSharp

  Medium5.3
• CVE-2026-106115

  ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

  SixLabors · ImageSharp

  High7.5
• CVE-2026-106114

  ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

  SixLabors · ImageSharp

  Medium5.3
• CVE-2026-106113

  ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index

  SixLabors · ImageSharp

  High7.5
• CVE-2026-106112

  ImageSharp: ICC LUT16 output channel count can write beyond Vector4

  SixLabors · ImageSharp

  High7.5
• CVE-2026-106111

  ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

  SixLabors · ImageSharp

  Medium5.9
• CVE-2026-106110

  ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

  SixLabors · ImageSharp

  High7.5
• CVE-2025-54575

  ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks

  SixLabors · ImageSharp

  Medium5.3