What’s Vulnerable › Products
SixLabors ImageSharp vulnerabilities
16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your SixLabors ImageSharp version is affected
Latest SixLabors ImageSharp vulnerabilities
- CVE-2026-106118 — ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write (CVSS 7.5)
- CVE-2026-106117 — ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp (CVSS 7.5)
- CVE-2026-106116 — ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop (CVSS 5.3)
- CVE-2026-106115 — ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer (CVSS 7.5)
- CVE-2026-106114 — ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions (CVSS 5.3)
- CVE-2026-106113 — ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index (CVSS 7.5)
- CVE-2026-106112 — ImageSharp: ICC LUT16 output channel count can write beyond Vector4 (CVSS 7.5)
- CVE-2026-106111 — ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate (CVSS 5.3)
- CVE-2026-106110 — ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer (CVSS 7.5)
- CVE-2025-54575 — ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks (CVSS 5.3)
- CVE-2025-27598 — Out-of-bounds Write in SixLabors ImageSharp (CVSS 7.5)
- CVE-2024-41132 — SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder (CVSS 7.5)
- CVE-2024-41131 — Out-of-bounds Write in SixLabors ImageSharp (CVSS 7.5)
- CVE-2024-32036 — SixLabors.ImageSharp vulnerable to data leakage (CVSS 6.5)
- CVE-2024-32035 — Memory Allocation with Excessive Size Value in SixLabors.ImageSharp (CVSS 6.5)
- CVE-2024-27929 — Use After Free in SixLabors.ImageSharp (CVSS 7.1)