CVE-2026-106118 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Cr… |
CVE-2026-106117 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can pass attacker-expand… |
CVE-2026-106116 | Medium | 5.3 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared e… |
CVE-2026-106115 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompresso… |
CVE-2026-106114 | Medium | 5.3 | 2026-10-06 | ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dime… |
CVE-2026-106113 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image<HalfVector4> and applying Histog… |
CVE-2026-106112 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate a… |
CVE-2026-106111 | Medium | 5.9 | 2026-10-06 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is short… |
CVE-2026-106110 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit ima… |
CVE-2025-54575 | Medium | 5.3 | 2025-07-30 | ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file containing a malformed comment extension b… |
CVE-2025-27598 | High | 7.5 | 2025-03-06 | ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a… |
CVE-2024-41132 | Medium | 5.3 | 2024-07-22 | ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive me… |
CVE-2024-41131 | High | 7.5 | 2024-07-22 | ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a… |
CVE-2024-32036 | Medium | 5.3 | 2024-04-15 | ImageSharp is a 2D graphics API. A data leakage flaw was found in ImageSharp's JPEG and TGA decoders. This vulnerability is triggered when an attacker passes a… |
CVE-2024-32035 | Medium | 5.3 | 2024-04-15 | ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive me… |
CVE-2024-27929 | High | 7.1 | 2024-03-05 | ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's InitializeImage() function of PngDecoderCore… |