CVE-2026-114112

The Sharp image processing library (versions prior to 0.35.4 ) is vulnerable to Remote Code Execution (RCE) on glibc-based Linux systems. The root cause is a heap-based buffer overflow (CWE-122) within a bundled libheif dependency. Attackers can exploit this by providing crafted AVIF or HEIF imag...