CVE-2026-106113

Summary

ImageSharp library allows attackers to crash applications when processing specially crafted TIFF images through histogram equalization operations, leading to denial of service via out-of-range memory access.

Exploitability

Exploitation requires an attacker to upload or provide a malicious 32-bit floating-point TIFF file that triggers histogram equalization on grayscale images, which is relatively straightforward but depends on the application using ImageSharp with this specific processing path.

Blast radius

The impact affects any application using ImageSharp 2.0.0 through 4.1.2 for processing TIFF images with histogram equalization, potentially causing widespread service disruption across image processing workflows.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 4.1.2 or later to fix the out-of-bounds memory access vulnerability in ColorNumerics.GetBT709Luminance during histogram equalization operations.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.