High
CVE-2026-106115
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
Medium
CVE-2026-106111
ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate
High
CVE-2026-106112
ImageSharp: ICC LUT16 output channel count can write beyond Vector4
Medium
CVE-2026-106116
ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop
High
CVE-2026-106110
ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer
High
CVE-2026-106113
ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index
Medium
CVE-2026-106114
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
High
CVE-2026-106118
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
High
CVE-2026-106117
ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
Medium
CVE-2025-54575
SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks
High
CVE-2025-27598
Out-of-bounds Write in SixLabors ImageSharp
Medium
CVE-2024-41132
SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder
High
CVE-2024-41131
SixLabors ImageSharp Out-of-bounds Write
Medium
CVE-2024-32036
SixLabors.ImageSharp vulnerable to data leakage
Medium
CVE-2024-32035
SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value
High
CVE-2024-27929
Use After Free in SixLabors.ImageSharp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.