CVE-2025-54575

ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file containing a malformed comment extension block (with a missing block terminator) can cause the ImageSharp GIF decoder to enter an infinite loop while attempting to skip the block. This leads to a denial of service. Applications processing untrusted GIF input should upgrade to a patched version. This issue is fixed in versions 2.1.11 and 3.1.11.

• CWE-400
• CWE-770

• https://github.com/SixLabors/ImageSharp/commit/55e49262df9a057dff9b7807ed1b7bdb49187c3f
• https://github.com/SixLabors/ImageSharp/commit/833f3ceec35af6b775950e06f03b934546cefbf6
• https://github.com/SixLabors/ImageSharp/issues/2953
• https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-rxmq-m78w-7wmc

Published

Jul 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54568Akamai Rate Control alpha before 2025 allows attackers to se…3.7
• CVE-2025-54569In Malwarebytes Binisoft Windows Firewall Control before 6.1…4.5
• CVE-2025-54571ModSecurity is an open source, cross platform web applicatio…6.1
• CVE-2025-54572The Ruby SAML library is for implementing the client side of…6.9
• CVE-2025-54573CVAT is an open source interactive video and image annotatio…6.5
• CVE-2025-54574Squid is a caching proxy for the Web. In versions 6.3 and be…9.8
• CVE-2025-54576OAuth2-Proxy is an open-source tool that can act as either a…9.1
• CVE-2025-54581vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3…7.5
• CVE-2025-54582Rejected reason: Reason: This candidate was issued in error.…
• CVE-2025-54583GitProxy is an application that stands between developers an…6.5
• CVE-2025-54584GitProxy is an application that stands between developers an…5.7
• CVE-2025-54585GitProxy is an application that stands between developers an…6.5