CVE-2026-106117

The SixLabors.ImageSharp 2D graphics library (versions 3.0.0 through 4.1.1 ) is vulnerable to a heap out-of-bounds (OOB) write during the decoding of strip TIFF images using CCITT Group 3 or Modified Huffman compression. The root cause is that T4TiffCompression.WritePixelRun can accumulate oversi...