CVE-2026-106118
Received Received - Intake

Heap Corruption in ImageSharp via Tiled TIFF Decoding

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: GitHub, Inc.

Description
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. TiffDecoderCore.DecodeTilesChunky can therefore direct frame-width fax scanlines into a tile-width buffer when TileWidth is smaller than ImageWidth. The mismatch causes attacker-controlled out-of-bounds writes, heap corruption, and process termination even with legal per-row run codes. This tiled-path vulnerability is distinct from oversized CCITT runs in strip decoding. This issue is fixed in version 4.1.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-106118
EUVD
EUVD-2026-93770

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
SixLabors ImageSharp >= 3.0.0, < 4.1.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

ImageSharp is a 2D graphics library. A vulnerability exists in versions 3.0.0 to 4.1.1 where tiled TIFF decoding allocates a buffer using TileWidth but decompressors use the full frame width. This mismatch causes out-of-bounds writes and heap corruption when scanlines are directed into a smaller buffer.

Detection Guidance

This vulnerability is specific to ImageSharp library versions 3.0.0 to 4.1.0 and involves tiled TIFF decoding. Detection requires checking installed ImageSharp versions and scanning for TIFF files processed by vulnerable versions. No direct network detection commands are available.

Impact Analysis

An attacker could exploit this to cause heap corruption, out-of-bounds memory writes, or crash the process. This may lead to denial of service or potential arbitrary code execution depending on the application's context and memory management.

Mitigation Strategies

Upgrade ImageSharp to version 4.1.1 or later immediately. Remove or replace any TIFF files processed by vulnerable versions. Review applications using ImageSharp for potential impacts from heap corruption or out-of-bounds writes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-106118. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart