SI
Vendor
SixLabors
16
CVEs
0
On KEV
9
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106118 | IM ImageSharp SixLabors | 7.5 | Oct 6 | ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write |
| CVE-2026-106117 | IM ImageSharp SixLabors | 7.5 | Oct 6 | ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp |
| CVE-2026-106116 | IM ImageSharp SixLabors | 5.3 | Oct 6 | ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop |
| CVE-2026-106115 | IM ImageSharp SixLabors | 7.5 | Oct 6 | ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer |
| CVE-2026-106114 | IM ImageSharp SixLabors | 5.3 | Oct 6 | ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions |
| CVE-2026-106113 | IM ImageSharp SixLabors | 7.5 | Oct 6 | ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index |
| CVE-2026-106112 | IM ImageSharp SixLabors | 7.5 | Oct 6 | ImageSharp: ICC LUT16 output channel count can write beyond Vector4 |
| CVE-2026-106111 | IM ImageSharp SixLabors | 5.3 | Oct 6 | ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate |
| CVE-2026-106110 | IM ImageSharp SixLabors | 7.5 | Oct 6 | ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer |
| CVE-2025-54575 | IM ImageSharp SixLabors | 5.3 | Jul 30 | ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks |
| CVE-2025-27598 | IM ImageSharp SixLabors | 7.5 | Mar 6 | Out-of-bounds Write in SixLabors ImageSharp |
| CVE-2024-41132 | IM ImageSharp SixLabors | 7.5 | Jul 22 | SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder |
| CVE-2024-41131 | IM ImageSharp SixLabors | 7.5 | Jul 22 | Out-of-bounds Write in SixLabors ImageSharp |
| CVE-2024-32036 | IM ImageSharp SixLabors | 6.5 | Apr 15 | SixLabors.ImageSharp vulnerable to data leakage |
| CVE-2024-32035 | IM ImageSharp SixLabors | 6.5 | Apr 15 | Memory Allocation with Excessive Size Value in SixLabors.ImageSharp |
| CVE-2024-27929 | IM ImageSharp SixLabors | 7.1 | Mar 5 | Use After Free in SixLabors.ImageSharp |