CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-106115

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode performs unchecked writes, and a decode-and-re-encode flow can inherit TiffCompression.CcittGroup4Fax and one-bit metadata from attacker-supplied input. The resulting out-of-bounds writes can corrupt memory and terminate the process. This issue is fixed in version 4.1.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 29.1%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2026-106115

Sixlabors » Imagesharp » Version: 2.1.0

cpe:2.3:a:sixlabors:imagesharp:2.1.0
Sixlabors » Imagesharp » Version: 2.1.1

cpe:2.3:a:sixlabors:imagesharp:2.1.1
Sixlabors » Imagesharp » Version: 2.1.10

cpe:2.3:a:sixlabors:imagesharp:2.1.10
Sixlabors » Imagesharp » Version: 2.1.11

cpe:2.3:a:sixlabors:imagesharp:2.1.11
Sixlabors » Imagesharp » Version: 2.1.2

cpe:2.3:a:sixlabors:imagesharp:2.1.2
Sixlabors » Imagesharp » Version: 2.1.3

cpe:2.3:a:sixlabors:imagesharp:2.1.3
Sixlabors » Imagesharp » Version: 2.1.4

cpe:2.3:a:sixlabors:imagesharp:2.1.4
Sixlabors » Imagesharp » Version: 2.1.5

cpe:2.3:a:sixlabors:imagesharp:2.1.5
Sixlabors » Imagesharp » Version: 2.1.6

cpe:2.3:a:sixlabors:imagesharp:2.1.6
Sixlabors » Imagesharp » Version: 2.1.7

cpe:2.3:a:sixlabors:imagesharp:2.1.7
Sixlabors » Imagesharp » Version: 2.1.8

cpe:2.3:a:sixlabors:imagesharp:2.1.8
Sixlabors » Imagesharp » Version: 2.1.9

cpe:2.3:a:sixlabors:imagesharp:2.1.9
Sixlabors » Imagesharp » Version: 3.0.0

cpe:2.3:a:sixlabors:imagesharp:3.0.0
Sixlabors » Imagesharp » Version: 3.0.1

cpe:2.3:a:sixlabors:imagesharp:3.0.1
Sixlabors » Imagesharp » Version: 3.0.2

cpe:2.3:a:sixlabors:imagesharp:3.0.2
Sixlabors » Imagesharp » Version: 3.1.0

cpe:2.3:a:sixlabors:imagesharp:3.1.0
Sixlabors » Imagesharp » Version: 3.1.1

cpe:2.3:a:sixlabors:imagesharp:3.1.1
Sixlabors » Imagesharp » Version: 3.1.10

cpe:2.3:a:sixlabors:imagesharp:3.1.10
Sixlabors » Imagesharp » Version: 3.1.11

cpe:2.3:a:sixlabors:imagesharp:3.1.11
Sixlabors » Imagesharp » Version: 3.1.12

cpe:2.3:a:sixlabors:imagesharp:3.1.12
Sixlabors » Imagesharp » Version: 3.1.2

cpe:2.3:a:sixlabors:imagesharp:3.1.2
Sixlabors » Imagesharp » Version: 3.1.3

cpe:2.3:a:sixlabors:imagesharp:3.1.3
Sixlabors » Imagesharp » Version: 3.1.4

cpe:2.3:a:sixlabors:imagesharp:3.1.4
Sixlabors » Imagesharp » Version: 3.1.5

cpe:2.3:a:sixlabors:imagesharp:3.1.5
Sixlabors » Imagesharp » Version: 3.1.6

cpe:2.3:a:sixlabors:imagesharp:3.1.6
Sixlabors » Imagesharp » Version: 3.1.7

cpe:2.3:a:sixlabors:imagesharp:3.1.7
Sixlabors » Imagesharp » Version: 3.1.8

cpe:2.3:a:sixlabors:imagesharp:3.1.8
Sixlabors » Imagesharp » Version: 3.1.9

cpe:2.3:a:sixlabors:imagesharp:3.1.9
Sixlabors » Imagesharp » Version: 4.0.0

cpe:2.3:a:sixlabors:imagesharp:4.0.0
Sixlabors » Imagesharp » Version: 4.1.0

cpe:2.3:a:sixlabors:imagesharp:4.1.0
Sixlabors » Imagesharp » Version: 4.1.1

cpe:2.3:a:sixlabors:imagesharp:4.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-106115

Products

Pricing

Contact Us