CVE-2026-106110

Summary

ImageSharp's TIFF CCITT Group 3 encoder has a buffer overflow vulnerability that can lead to arbitrary code execution when processing narrow 1-bit images. This affects versions 2.0.0 through 4.1.2 and allows attackers to corrupt memory and terminate processes.

Exploitability

Exploitation is moderately difficult as it requires an attacker to control the encoding of a narrow 1-bit TIFF image, either directly or through a decode-encode cycle, with specific TiffCompression.CcittGroup3Fax settings.

Blast radius

The impact is significant for applications that process TIFF images, particularly those handling user-uploaded or third-party images, as it can lead to service disruption and potential remote code execution on affected systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to ImageSharp version 4.1.2 or later to remediate the buffer overflow vulnerability in the TIFF CCITT Group 3 encoder.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.