SixLabors.ImageSharp is vulnerable to Out-of-bounds Write in versions 3.0.0 - 4.1.0

[sydseter]

Our Aikido Pipeline are reporting the following error:

https://intel.aikido.dev/cve/AIKIDO-2026-983562
https://intel.aikido.dev/cve/AIKIDO-2026-827156

Who does this affect?

You are affected if you use a version within the vulnerable range and decode untrusted TIFF images that use CCITT/fax (Group 3 or Modified Huffman) compression.

Background info

SixLabors.ImageSharp is vulnerable to an out-of-bounds write in versions 3.0.0-4.1.0.

How to fix this

Upgrade the SixLabors.ImageSharp library to the patched version.