CVE-2026-106118
Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: GitHub, Inc.

Description
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. TiffDecoderCore.DecodeTilesChunky can therefore direct frame-width fax scanlines into a tile-width buffer when TileWidth is smaller than ImageWidth. The mismatch causes attacker-controlled out-of-bounds writes, heap corruption, and process termination even with legal per-row run codes. This tiled-path vulnerability is distinct from oversized CCITT runs in strip decoding. This issue is fixed in version 4.1.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-106118
EUVD
EUVD-2026-93770

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SixLabors ImageSharp >= 3.0.0, < 4.1.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

ImageSharp is a 2D graphics library. A vulnerability exists in versions 3.0.0 to 4.1.1 where tiled TIFF decoding allocates a buffer using TileWidth but decompressors use the full frame width. This mismatch causes out-of-bounds writes and heap corruption when scanlines are directed into a smaller buffer.

Detection Guidance

This vulnerability is specific to ImageSharp library versions 3.0.0 to 4.1.0 and involves tiled TIFF decoding. Detection requires checking installed ImageSharp versions and scanning for TIFF files processed by vulnerable versions. No direct network detection commands are available.

Impact Analysis

An attacker could exploit this to cause heap corruption, out-of-bounds memory writes, or crash the process. This may lead to denial of service or potential arbitrary code execution depending on the application's context and memory management.

Compliance Impact

This vulnerability could lead to heap corruption and process termination, which may result in denial of service or unauthorized data access. Such impacts could violate GDPR's integrity and availability principles or HIPAA's security requirements for protecting health data.

Mitigation Strategies

Upgrade ImageSharp to version 4.1.1 or later immediately. Remove or replace any TIFF files processed by vulnerable versions. Review applications using ImageSharp for potential impacts from heap corruption or out-of-bounds writes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-106118. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart