GitHub Advisoryadvisory · NuGet

GHSA-2cmq-823j-5qj8 Out-of-bounds Write in SixLabors ImageSharp

HIGH Published 2025-03-06 Modified 2025-03-07 Official page ↗
Aliases
CVE-2025-27598
Ecosystem
NuGet
Packages
SixLabors.ImageSharp
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-787
Reviewed
2025-03-06

Affected packages

• NuGet SixLabors.ImageSharp: >= 3.0.0, < 3.1.7 → fixed in 3.1.7 • NuGet SixLabors.ImageSharp: < 2.1.10 → fixed in 2.1.10

Description

Impact An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. Patches The problem has been patched. All users are advised to upgrade to v3.1.7 or v2.1.10. Workarounds None. References https://github.com/SixLabors/ImageSharp/issues/2859 https://github.com/SixLabors/ImageSharp/issues/2890

Related

Alias · CVE (1)

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References