SkiaSharp Release Notes

3.116.1.x Releases

3.116.1.2 (NES)

Notes

• This release keeps NES for SkiaSharp on the 3.116.1.x line while backporting the integer-overflow hardening delivered upstream in SkiaSharp 4.148.0, so consumers get the fix without a major-version move.

Security Fixes

• Image buffer size arithmetic: SKImageInfo.BytesSize, SKImageInfo.RowBytes, and the internal pixel-offset helper now use checked arithmetic. An image whose dimensions overflow a 32-bit byte count raises OverflowException instead of silently wrapping to a small or negative size. Previously, code sizing a pinned managed buffer from BytesSize could allocate far less than the image required — a 32768x32768 RGBA image wrapped to a zero-length buffer — and native decoding would then write past the end of it.
  • Fixes an integer-overflow buffer-overflow vulnerability (CVE-2026-58641).

Upgrade Notes

• Applications that decode or allocate images large enough to exceed int.MaxValue bytes will now see an OverflowException from BytesSize or RowBytes where they previously received an incorrect value. Use the existing BytesSize64 and RowBytes64 members, which report the true size and are unaffected by this change.