IM
Product
ImageSharp
16
CVEs
0
On KEV
7.5
Max CVSS
9
New 30D
Severity mix
Critical 0High 10Medium 6Low 0
Watch
Add ImageSharp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106118 | 7.5 | Oct 6 | ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write Affected: >= 3.0.0, < 4.1.1 |
| CVE-2026-106117 | 7.5 | Oct 6 | ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp Affected: >= 3.0.0, < 4.1.1 |
| CVE-2026-106115 | 7.5 | Oct 6 | ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer Affected: >= 2.1.0, < 4.1.2 |
| CVE-2026-106113 | 7.5 | Oct 6 | ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index Affected: >= 2.0.0, < 4.1.2 |
| CVE-2026-106112 | 7.5 | Oct 6 | ImageSharp: ICC LUT16 output channel count can write beyond Vector4 Affected: >= 4.0.0, < 4.1.2 |
| CVE-2026-106110 | 7.5 | Oct 6 | ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer Affected: >= 2.0.0, < 4.1.2 |
| CVE-2025-27598 | 7.5 | Mar 6 | Out-of-bounds Write in SixLabors ImageSharp Affected: < 2.1.10; >= 3.0.0, < 3.1.7 |
| CVE-2024-41132 | 7.5 | Jul 22 | ImageSharp is a 2D graphics API Affected: 2.1.0 before 2.1.9; 3.1.0 before 3.1.5 |
| CVE-2024-41131 | 7.5 | Jul 22 | ImageSharp is a 2D graphics API Affected: 2.1.0 before 2.1.9; 3.1.0 before 3.1.5 |
| CVE-2024-27929 | 7.1 | Mar 5 | ImageSharp is a managed, cross-platform, 2D graphics library Affected: before 2.1.7; 3.1.0 before 3.1.3 |
| CVE-2024-32036 | 6.5 | Apr 15 | ImageSharp is a 2D graphics API Affected: before 2.1.8; 3.0.0 before 3.1.4 |
| CVE-2024-32035 | 6.5 | Apr 15 | ImageSharp is a 2D graphics API Affected: before 2.1.8; 3.0.0 before 3.1.4 |
| CVE-2026-106116 | 5.3 | Oct 6 | ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop Affected: >= 2.0.0, < 4.1.2 |
| CVE-2026-106114 | 5.3 | Oct 6 | ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions Affected: >= 1.0.0-beta0001, < 4.1.2 |
| CVE-2026-106111 | 5.3 | Oct 6 | ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate Affected: >= 4.0.0, < 4.1.2 |
| CVE-2025-54575 | 5.3 | Jul 30 | ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks Affected: < 2.1.11; >= 3.0.0, < 3.1.11 |
Showing 16