SixLabors

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

SixLabors records in CISA KEV

No SixLabors vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Imagesharp 14 records HIGH

Records

14 records in Imagesharp · all components

TI-2026-68636 CVE-2026-106117 · GHSA-jj3q-cwqj-842r

Out-of-bounds write in ImageSharp CCITT fax decompression

HIGH 72

ImageSharp is a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2026-10-06 Fixed in 4.1.1, 3.2.0 CWE-787

TI-2026-68634 CVE-2026-106115 · GHSA-jjfr-hcj7-qf5w

Out-of-bounds write in ImageSharp TIFF CCITT Group 4 encoder

HIGH 72

ImageSharp is a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2026-10-06 Fixed in 4.1.2, 3.2.0 CWE-787

TI-2026-68629 CVE-2026-106110 · GHSA-j9gm-c75j-xc9q

Out-of-bounds write in ImageSharp TIFF CCITT encoder

HIGH 72

ImageSharp is a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2026-10-06 Fixed in 4.1.2, 3.2.0 CWE-787

TI-2025-20408 CVE-2025-27598 · GHSA-2cmq-823j-5qj8

Out-of-bounds Write in SixLabors ImageSharp

HIGH 72

ImageSharp is a 2D graphics API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0057 Published 2025-03-06 Fixed in 2.1.10, 3.1.7 CWE-787

TI-2026-68635 CVE-2026-106116 · GHSA-wmxv-xphr-5c9g

ImageSharp BigTIFF IFD count can keep a decoder thread in a non-progressing loop

MEDIUM 63

ImageSharp is a 2D graphics library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00328 Published 2026-10-06 Fixed in 4.1.2, 3.2.0 CWE-835

TI-2026-68633 CVE-2026-106114 · GHSA-gwg2-r3hj-4w44

Excessive memory allocation in ImageSharp ICC CLUT parsing

MEDIUM 63

ImageSharp is a 2D graphics library.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00328 Published 2026-10-06 Fixed in 4.1.2, 3.2.0 CWE-789

TI-2026-68630 CVE-2026-106111 · GHSA-4q3p-rj5x-xv7p

Stale buffer data disclosure in ImageSharp EXR ZIP decoding

MEDIUM 60

ImageSharp is a 2D graphics library.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0028 Published 2026-10-06 Fixed in 4.1.2 CWE-226

TI-2024-27484 CVE-2024-41132 · GHSA-qxrv-gp6x-rc23

SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder

MEDIUM 40

ImageSharp is a 2D graphics API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00774 Published 2024-07-22 Fixed in 2.1.9, 3.1.5 CWE-789

TI-2024-27483 CVE-2024-41131 · GHSA-63p8-c4ww-9cg7

Out-of-bounds Write in SixLabors ImageSharp

MEDIUM 40

ImageSharp is a 2D graphics API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00669 Published 2024-07-22 Fixed in 2.1.9, 3.1.5 CWE-787

TI-2026-68632 CVE-2026-106113 · GHSA-j3p4-wp97-rph4

Out-of-bounds write in ImageSharp HistogramEqualization

LOW 39

ImageSharp is a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0039 Published 2026-10-06 Fixed in 4.1.2, 3.2.0 CWE-787

TI-2026-68631 CVE-2026-106112 · GHSA-ffp7-56pq-64mr

Out-of-bounds write in ImageSharp ICC LUT16 conversion

LOW 39

ImageSharp is a 2D graphics library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2026-10-06 Fixed in 4.1.2 CWE-787

TI-2024-18532 CVE-2024-27929 · GHSA-65x7-c272-7g7r

Use After Free in SixLabors.ImageSharp

LOW 31

ImageSharp is a managed, cross-platform, 2D graphics library.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00353 Published 2024-03-05 Fixed in 3.1.3, 2.1.7 CWE-416

TI-2024-21127 CVE-2024-32036 · GHSA-5x7m-6737-26cr

SixLabors.ImageSharp vulnerable to data leakage

LOW 30

ImageSharp is a 2D graphics API.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00575 Published 2024-04-15 Fixed in 2.1.8, 3.1.4 CWE-226

TI-2024-21126 CVE-2024-32035 · GHSA-g85r-6x2q-45w7

Memory Allocation with Excessive Size Value in SixLabors.ImageSharp

LOW 30

ImageSharp is a 2D graphics API.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00629 Published 2024-04-15 Fixed in 2.1.8, 3.1.4 CWE-789

Open these records in search →

Critical	0
High	10
Medium	6
Low	0
No CVSS	0