PT-2025-31440 · Sixlabors · Imagesharp

Whatevicanhaz · Published 2025-07-30 · Updated 2025-07-31 · CVE-2025-54575

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions ImageSharp versions prior to 2.1.11 ImageSharp versions 3.0.0 through 3.1.10

Description ImageSharp is a 2D graphics library susceptible to a denial of service. A specially crafted GIF file containing a malformed comment extension block, specifically missing a block terminator, can cause the ImageSharp GIF decoder to enter an infinite loop while attempting to skip the block. This issue affects applications processing untrusted GIF input.

Recommendations Upgrade to version 2.1.11 or later. Upgrade to version 3.1.11 or later.

Exploit

Fix

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

CVE-2025-54575

GHSA-RXMQ-M78W-7WMC

Affected Products

Imagesharp

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54575.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-54575 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54575 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rxmq-m78w-7wmc · Vendor Advisory
• https://github.com/SixLabors/ImageSharp/commit/833f3ceec35af6b775950e06f03b934546cefbf6 · Note
• https://github.com/SixLabors/ImageSharp/issues/2953 · Note
• https://github.com/SixLabors/ImageSharp/commit/55e49262df9a057dff9b7807ed1b7bdb49187c3f · Note
• https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-rxmq-m78w-7wmc · Note
• https://github.com/SixLabors/ImageSharp · Note
• https://twitter.com/CVEnew/status/1950651996878336236 · Twitter Post
• https://t.me/CVEtracker/28780 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1950722659903303984 · Twitter Post