Threats tagged 'ghsa-jjfr-hcj7-qf5w'

CVE-2026-106115 is an out-of-bounds write vulnerability in the TIFF CCITT Group 4 encoder of SixLabors ImageSharp, a 2D graphics library. Versions from 2.1.0 up to but not including 4.1.2 are affected. The issue arises because the encoder allocates insufficient buffer size, while the compression function can write beyond this allocated memory, leading to memory corruption and potential process termination. This vulnerability is fixed in version 4.1.2.