CVE-2026-106118

Summary

ImageSharp library has a buffer overflow vulnerability in TIFF decoding where tiled images with smaller tile widths can cause out-of-bounds writes into heap memory, potentially leading to arbitrary code execution or process termination.

Exploitability

Exploitation is moderately difficult as it requires crafting a malicious TIFF file with specific tile dimensions that trigger the buffer overflow, but the vulnerability allows for reliable heap corruption and process termination even with valid run codes.

Blast radius

The impact is significant across any application using ImageSharp for TIFF image processing, particularly web applications that accept user-uploaded images, potentially affecting hundreds of thousands to millions of users.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 4.1.1 or later to fix the TIFF decoding buffer overflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.