Defined in 8 files
Last patched
Decompress in SixLabors/ImageSharp was changed by 9 published CVE fixes in 2026, in 15 distinct patches that added or removed 250 lines in total.
The name occurs in 8 files: src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs, src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs, src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs, src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs, src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs, src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs, src/ImageSharp/Formats/Tiff/Compression/Decompressors/ModifiedHuffmanTiffCompression.cs, src/ImageSharp/Formats/Tiff/Compression/Decompressors/T4TiffCompression.cs.
SixLabors/ImageSharp has 15 CVEs with a located fix in total, so 60% of them touched this function.
Every published CVE whose fix changed Decompress, newest first, with the lines each fix touched.
CVE-2026-106118 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/ModifiedHuffmanTiffCompression.cs · lines 56–95 · +6 −5 in 2 hunks
CVE-2026-106118 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/T4TiffCompression.cs · line 75 · +1 −1
CVE-2026-106117 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/ModifiedHuffmanTiffCompression.cs · lines 56–95 · +6 −5 in 2 hunks
CVE-2026-106117 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/T4TiffCompression.cs · line 75 · +1 −1
CVE-2026-106116 · src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs · line 42 · +1 −1
CVE-2026-106116 · src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs · lines 28–31 · +3 −3
CVE-2026-106116 · src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs · lines 42–55 · +6 −5
CVE-2026-106116 · src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs · line 29 · +1 −1
CVE-2026-106116 · src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs · lines 29–36 · +4 −5
CVE-2026-106116 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs · line 72 · +1 −1
CVE-2026-106115 · src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs · line 42 · +1 −1
CVE-2026-106115 · src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs · lines 28–31 · +3 −3
CVE-2026-106115 · src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs · lines 42–55 · +6 −5
CVE-2026-106115 · src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs · line 29 · +1 −1
CVE-2026-106115 · src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs · lines 29–36 · +4 −5
CVE-2026-106115 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs · line 72 · +1 −1
CVE-2026-106114 · src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs · line 42 · +1 −1
CVE-2026-106114 · src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs · lines 28–31 · +3 −3
CVE-2026-106114 · src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs · lines 42–55 · +6 −5
CVE-2026-106114 · src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs · line 29 · +1 −1
CVE-2026-106114 · src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs · lines 29–36 · +4 −5
CVE-2026-106114 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs · line 72 · +1 −1
CVE-2026-106113 · src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs · line 42 · +1 −1
CVE-2026-106113 · src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs · lines 28–31 · +3 −3
CVE-2026-106113 · src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs · lines 42–55 · +6 −5
CVE-2026-106113 · src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs · line 29 · +1 −1
CVE-2026-106113 · src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs · lines 29–36 · +4 −5
CVE-2026-106113 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs · line 72 · +1 −1
CVE-2026-106112 · src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs · line 42 · +1 −1
CVE-2026-106112 · src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs · lines 28–31 · +3 −3
CVE-2026-106112 · src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs · lines 42–55 · +6 −5
CVE-2026-106112 · src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs · line 29 · +1 −1
CVE-2026-106112 · src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs · lines 29–36 · +4 −5
CVE-2026-106112 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs · line 72 · +1 −1
CVE-2026-106111 · src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs · line 42 · +1 −1
CVE-2026-106111 · src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs · lines 28–31 · +3 −3
CVE-2026-106111 · src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs · lines 42–55 · +6 −5
CVE-2026-106111 · src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs · line 29 · +1 −1
CVE-2026-106111 · src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs · lines 29–36 · +4 −5
CVE-2026-106111 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs · line 72 · +1 −1
CVE-2026-106110 · src/ImageSharp/Formats/Exr/Compression/Decompressors/B44ExrCompression.cs · line 42 · +1 −1
CVE-2026-106110 · src/ImageSharp/Formats/Exr/Compression/Decompressors/NoneExrCompression.cs · lines 28–31 · +3 −3
CVE-2026-106110 · src/ImageSharp/Formats/Exr/Compression/Decompressors/Pxr24Compression.cs · lines 42–55 · +6 −5
CVE-2026-106110 · src/ImageSharp/Formats/Exr/Compression/Decompressors/RunLengthExrCompression.cs · line 29 · +1 −1
CVE-2026-106110 · src/ImageSharp/Formats/Exr/Compression/Decompressors/ZipExrCompression.cs · lines 29–36 · +4 −5
CVE-2026-106110 · src/ImageSharp/Formats/Tiff/Compression/Decompressors/DeflateTiffCompression.cs · line 72 · +1 −1
Get an alert when the next CVE fix lands in SixLabors/ImageSharp, with the patched functions.
Monitor ImageSharp CVEsFunctions in the same files that CVE fixes also changed.
Functions in SixLabors/ImageSharp changed by the most CVE fixes.
Common questions about CVE fixes to Decompress.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
