CVE-2025-27598

7.5 highEPSS 0.6%

High (7.5) in sixlabors imagesharp. EPSS 0.6% chance of exploitation in the next 30 days.

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. The problem has been patched. All users are advised to upgrade to v3.1.7 or v2.1.10.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2025-03-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sixlabors:imagesharp

References

https://github.com/SixLabors/ImageSharp/issues/2859
https://github.com/SixLabors/ImageSharp/pull/2890
https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-2cmq-823j-5qj8
https://github.com/SixLabors/ImageSharp/issues/2859

Check your stack JSON