Buffer Overflow Vulnerability in ImageSharp Graphics Library
CVE-2026-106117
7.5HIGH
What is CVE-2026-106117?
The ImageSharp graphics library, specifically versions 3.0.0 to 4.1.1, contains a buffer overflow vulnerability that arises during the decoding of strip TIFF images using CCITT Group 3 or Modified Huffman compression. The flaw occurs when an attacker can exploit unchecked writes in the BitWriterUtils.WriteBits function, allowing oversized code runs to accumulate. This unchecked process can overflow the strip buffer, leading to potential corruption of heap memory and resulting in termination of the process. This vulnerability has been addressed in version 4.1.1 of the library.
Affected Version(s)
ImageSharp >= 3.0.0, < 4.1.1