ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer than 20 bytes remain, ExifReader.ReadValue64 returns without advancing the stream or terminating the outer loop, so a small malformed BigTIFF can keep one decoder thread executing for an attacker-controlled duration. This report does not claim worker-pool exhaustion. This issue is fixed in version 4.1.2.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit
    BigTIFF IFD entry count and iterates once per declared entry. When fewer than 20 bytes remain,
    ExifReader.ReadValue64 returns without advancing the stream or terminating the outer loop, so a small
    malformed BigTIFF can keep one decoder thread executing for an attacker-controlled duration. This report
    does not claim worker-pool exhaustion. This issue is fixed in version 4.1.2. (CVE-2026-106116)

ID	Name	Product	Family	Type	Severity
474141	Echo: SixLabors.ImageSharp, sixlabors.imagesharp: security update to 4.1.2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
474141	Echo: SixLabors.ImageSharp, sixlabors.imagesharp: security update to 4.1.2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
473823	SCA: security update for SixLabors.ImageSharp (GHSA-wmxv-xphr-5c9g)	Tenable Cloud Security	SCA Checks	Local	medium
473823	SCA: security update for SixLabors.ImageSharp (GHSA-wmxv-xphr-5c9g)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-106116

medium

Tenable Plugins

medium

medium

medium

medium