SixLabors ImageSharp up to 4.1.1 Encoder TiffCcittCompressor.Initialize buffer overflow

Summaryinfo

A vulnerability was found in SixLabors ImageSharp up to 4.1.1. It has been rated as problematic. This impacts the function TiffCcittCompressor.Initialize of the component Encoder. This manipulation causes buffer overflow. The identification of this vulnerability is CVE-2026-106110. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as problematic was found in SixLabors ImageSharp up to 4.1.1. Affected by this vulnerability is the function TiffCcittCompressor.Initialize of the component Encoder. The manipulation with an unknown input leads to a buffer overflow vulnerability. The CWE definition for the vulnerability is CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. As an impact it is known to affect availability. The summary by CVE is:

ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompressor.Initialize does not reserve enough space for the row data and T4 end-of-line codes, and T4BitCompressor.CompressStrip reaches unchecked writes when TiffCompression.CcittGroup3Fax is selected directly or inherited from decoded TIFF metadata. An attacker-controlled encode or decode-and-re-encode flow can write beyond the logical output span, corrupt process memory, and terminate the process. This issue is fixed in version 4.1.2.

It is possible to read the advisory at github.com. This vulnerability is known as CVE-2026-106110 since 10/06/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 4.1.2 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• SixLabors

Name

• ImageSharp

Version

• 4.1.0
• 4.1.1

Website

• Product: https://github.com/SixLabors/ImageSharp/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion