CVE-2025-27598CWE-787

Out-of-bounds Write in SixLabors ImageSharp

High · published March 6, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. The problem has been patched. All users are advised to upgrade to v3.1.7 or v2.1.10.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00570 · 46.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-03-06T22:23Z
EPSS history
Timeline
  • 06 MAR 22:23Z
    Out-of-bounds Write in SixLabors ImageSharp
    cvelistv5