CVE-2026-106117 | SixLabors ImageSharp up to 4.1.0 Tiff Decompression T4TiffCompression.WritePixelRun heap-based overflow

October 6, 2026 Yanac

A vulnerability identified as problematic has been detected in SixLabors ImageSharp up to 4.1.0. Affected by this vulnerability is the function T4TiffCompression.WritePixelRun of the component Tiff Decompression. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is identified as CVE-2026-106117. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More