Threats tagged 'ghsa-gwg2-r3hj-4w44'

CVE-2026-106114 is a medium severity vulnerability in SixLabors.ImageSharp affecting versions from 1.0.0-beta0001 through 4.1.1. It involves a memory allocation flaw triggered by a malformed embedded ICC profile, which causes the library to allocate an excessively large amount of memory before validating the profile data. This can lead to significant memory pressure but does not cause unhandled crashes or data corruption. The issue occurs during ICC profile decoding when color profile conversion is enabled. No active exploitation is known, and the allocation failure is caught by the library.