Threats tagged 'ghsa-j9gm-c75j-xc9q'

CVE-2026-106110 is a high-severity out-of-bounds write vulnerability in the SixLabors ImageSharp 2D graphics library affecting versions from 2.0.0 up to but not including 4.1.2. The issue occurs in the TIFF CCITT Group 3 encoder, which allocates an undersized buffer for compressed data in narrow 1-bit images. This leads to unchecked writes beyond the allocated memory during compression, potentially corrupting process memory and causing process termination. The vulnerability is fixed in version 4.1.2.