sharp vulnerabilities

2 known vulnerabilities in sharp from Lovell. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.9 High severity

  sharp: Heap-based Buffer Overflow

  CVE-2026-114112Oct 21, 2026Lovell

  Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted im

• 8.9 High severity

  sharp: Use After Free

  CVE-2026-114111Oct 21, 2026Lovell

  sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when