ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompressor.Initialize does not reserve enough space for the row data and T4 end-of-line codes, and T4BitCompressor.CompressStrip reaches unchecked writes when TiffCompression.CcittGroup3Fax is selected directly or inherited from decoded TIFF metadata. An attacker-controlled encode or decode-and-re-encode flow can write beyond the logical output span, corrupt process memory, and terminate the process. This issue is fixed in version 4.1.2.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an
    undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompressor.Initialize does not reserve
    enough space for the row data and T4 end-of-line codes, and T4BitCompressor.CompressStrip reaches
    unchecked writes when TiffCompression.CcittGroup3Fax is selected directly or inherited from decoded TIFF
    metadata. An attacker-controlled encode or decode-and-re-encode flow can write beyond the logical output
    span, corrupt process memory, and terminate the process. This issue is fixed in version 4.1.2.
    (CVE-2026-106110)

ID	Name	Product	Family	Type	Severity
474115	Echo: SixLabors.ImageSharp, sixlabors.imagesharp: security update to 4.1.2	Tenable Cloud Security	Echo Local Security Checks	Local	high
474115	Echo: SixLabors.ImageSharp, sixlabors.imagesharp: security update to 4.1.2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
473793	SCA: security update for SixLabors.ImageSharp (GHSA-j9gm-c75j-xc9q)	Tenable Cloud Security	SCA Checks	Local	high
473793	SCA: security update for SixLabors.ImageSharp (GHSA-j9gm-c75j-xc9q)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-106110

high

Tenable Plugins

high

high

high

high