CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-106116

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer than 20 bytes remain, ExifReader.ReadValue64 returns without advancing the stream or terminating the outer loop, so a small malformed BigTIFF can keep one decoder thread executing for an attacker-controlled duration. This report does not claim worker-pool exhaustion. This issue is fixed in version 4.1.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 24.7%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2026-106116

Sixlabors » Imagesharp » Version: 2.0.0

cpe:2.3:a:sixlabors:imagesharp:2.0.0
Sixlabors » Imagesharp » Version: 2.1.0

cpe:2.3:a:sixlabors:imagesharp:2.1.0
Sixlabors » Imagesharp » Version: 2.1.1

cpe:2.3:a:sixlabors:imagesharp:2.1.1
Sixlabors » Imagesharp » Version: 2.1.10

cpe:2.3:a:sixlabors:imagesharp:2.1.10
Sixlabors » Imagesharp » Version: 2.1.11

cpe:2.3:a:sixlabors:imagesharp:2.1.11
Sixlabors » Imagesharp » Version: 2.1.2

cpe:2.3:a:sixlabors:imagesharp:2.1.2
Sixlabors » Imagesharp » Version: 2.1.3

cpe:2.3:a:sixlabors:imagesharp:2.1.3
Sixlabors » Imagesharp » Version: 2.1.4

cpe:2.3:a:sixlabors:imagesharp:2.1.4
Sixlabors » Imagesharp » Version: 2.1.5

cpe:2.3:a:sixlabors:imagesharp:2.1.5
Sixlabors » Imagesharp » Version: 2.1.6

cpe:2.3:a:sixlabors:imagesharp:2.1.6
Sixlabors » Imagesharp » Version: 2.1.7

cpe:2.3:a:sixlabors:imagesharp:2.1.7
Sixlabors » Imagesharp » Version: 2.1.8

cpe:2.3:a:sixlabors:imagesharp:2.1.8
Sixlabors » Imagesharp » Version: 2.1.9

cpe:2.3:a:sixlabors:imagesharp:2.1.9
Sixlabors » Imagesharp » Version: 3.0.0

cpe:2.3:a:sixlabors:imagesharp:3.0.0
Sixlabors » Imagesharp » Version: 3.0.1

cpe:2.3:a:sixlabors:imagesharp:3.0.1
Sixlabors » Imagesharp » Version: 3.0.2

cpe:2.3:a:sixlabors:imagesharp:3.0.2
Sixlabors » Imagesharp » Version: 3.1.0

cpe:2.3:a:sixlabors:imagesharp:3.1.0
Sixlabors » Imagesharp » Version: 3.1.1

cpe:2.3:a:sixlabors:imagesharp:3.1.1
Sixlabors » Imagesharp » Version: 3.1.10

cpe:2.3:a:sixlabors:imagesharp:3.1.10
Sixlabors » Imagesharp » Version: 3.1.11

cpe:2.3:a:sixlabors:imagesharp:3.1.11
Sixlabors » Imagesharp » Version: 3.1.12

cpe:2.3:a:sixlabors:imagesharp:3.1.12
Sixlabors » Imagesharp » Version: 3.1.2

cpe:2.3:a:sixlabors:imagesharp:3.1.2
Sixlabors » Imagesharp » Version: 3.1.3

cpe:2.3:a:sixlabors:imagesharp:3.1.3
Sixlabors » Imagesharp » Version: 3.1.4

cpe:2.3:a:sixlabors:imagesharp:3.1.4
Sixlabors » Imagesharp » Version: 3.1.5

cpe:2.3:a:sixlabors:imagesharp:3.1.5
Sixlabors » Imagesharp » Version: 3.1.6

cpe:2.3:a:sixlabors:imagesharp:3.1.6
Sixlabors » Imagesharp » Version: 3.1.7

cpe:2.3:a:sixlabors:imagesharp:3.1.7
Sixlabors » Imagesharp » Version: 3.1.8

cpe:2.3:a:sixlabors:imagesharp:3.1.8
Sixlabors » Imagesharp » Version: 3.1.9

cpe:2.3:a:sixlabors:imagesharp:3.1.9
Sixlabors » Imagesharp » Version: 4.0.0

cpe:2.3:a:sixlabors:imagesharp:4.0.0
Sixlabors » Imagesharp » Version: 4.1.0

cpe:2.3:a:sixlabors:imagesharp:4.1.0
Sixlabors » Imagesharp » Version: 4.1.1

cpe:2.3:a:sixlabors:imagesharp:4.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-106116

Products

Pricing

Contact Us