CVE-2026-106116

Name of the Vulnerable Software and Affected Versions ImageSharp versions 2.0.0 through 4.1.1

Description ImageSharp is a 2D graphics library. The ExifReader.ReadValues64 function trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. If fewer than 20 bytes remain, the ExifReader.ReadValue64 function returns without advancing the stream or terminating the outer loop. This allows a small malformed BigTIFF file to keep a decoder thread executing for a duration controlled by an attacker.

Recommendations Update to version 4.1.2.