CVE-2026-106115: fallo de gravedad alta en SixLabors ImageSharp
ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer
Publicada el
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.5epss 0.4%
probabilidad de explotación
0.4%top 73% de las CVE
explotación observada
noninguna fuente lo reporta
ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode performs unchecked writes, and a decode-and-re-encode flow can inherit TiffCompression.CcittGroup4Fax and one-bit metadata from attacker-supplied input. The resulting out-of-bounds writes can corrupt memory and terminate the process. This issue is fixed in version 4.1.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
SixLabors · ImageSharpCVEs relacionadas — SixLabors ImageSharp
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-41132MEDIUMSixLabors ImageSharp Allows Excessive Memory Allocation in Gif DecoderEPSS 0.8%CVE-2024-41131HIGHOut-of-bounds Write in SixLabors ImageSharpEPSS 0.7%CVE-2024-32035MEDIUMMemory Allocation with Excessive Size Value in SixLabors.ImageSharpEPSS 0.6%CVE-2026-106118HIGHImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB writeEPSS 0.6%CVE-2024-32036MEDIUMSixLabors.ImageSharp vulnerable to data leakageEPSS 0.6%CVE-2025-27598HIGHOut-of-bounds Write in SixLabors ImageSharpEPSS 0.6%