CVE-2026-106114

Name of the Vulnerable Software and Affected Versions ImageSharp versions 1.0.0-beta0001 through 4.1.1

Description ICC CLUT parsing calculates allocation sizes based on attacker-declared channel and grid dimensions before verifying that the profile contains the declared values. The IccDataReader.ReadClutF32() function can request a large float array, and earlier public IccProfile.Entries parsing paths can allocate a large jagged representation from a short truncated profile. In version 4, this occurs during automatic image conversion when DecoderOptions.ColorProfileHandling is set to Convert. The impact includes memory pressure and input-validation failure.

Recommendations Update to version 4.1.2. Set DecoderOptions.ColorProfileHandling to Preserve mode to avoid the conversion path.