{"id":"CVE-2026-106113","published":"2026-10-06T18:16:52.953","lastModified":"2026-10-07T17:16:47.540","description":"ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image<HalfVector4> and applying HistogramEqualization can produce a non-finite or out-of-range luminance in ColorNumerics.GetBT709Luminance. GrayscaleLevelsRowOperation.Invoke uses the resulting value as an unchecked histogram offset, causing an unsafe out-of-range access and process termination. Adaptive Histogram Equalization and AutoLevel are not affected by this report. This issue is fixed in version 4.1.2.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://github.com/SixLabors/ImageSharp/commit/c4c4bf292298c026df470db1a17ff826515fd95d","tags":[]},{"url":"https://github.com/SixLabors/ImageSharp/pull/3187","tags":[]},{"url":"https://github.com/SixLabors/ImageSharp/releases/tag/v4.1.2","tags":[]},{"url":"https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-j3p4-wp97-rph4","tags":[]}],"exploitRefs":[{"url":"https://github.com/SixLabors/ImageSharp/commit/c4c4bf292298c026df470db1a17ff826515fd95d","tags":[]},{"url":"https://github.com/SixLabors/ImageSharp/pull/3187","tags":[]},{"url":"https://github.com/SixLabors/ImageSharp/releases/tag/v4.1.2","tags":[]},{"url":"https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-j3p4-wp97-rph4","tags":[]}],"hasPoc":true,"ai":{"summary":"ImageSharp library allows attackers to crash applications when processing specially crafted TIFF images through histogram equalization operations, leading to denial of service via out-of-range memory access.","exploitability":"Exploitation requires an attacker to upload or provide a malicious 32-bit floating-point TIFF file that triggers histogram equalization on grayscale images, which is relatively straightforward but depends on the application using ImageSharp with this specific processing path.","blast_radius":"The impact affects any application using ImageSharp 2.0.0 through 4.1.2 for processing TIFF images with histogram equalization, potentially causing widespread service disruption across image processing workflows.","remediation":"Upgrade to version 4.1.2 or later to fix the out-of-bounds memory access vulnerability in ColorNumerics.GetBT709Luminance during histogram equalization operations.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","image-processing","memory-access"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:05:26.522Z"}}