{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aimgproxyimgproxy/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:imgproxy:imgproxy:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-123616"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["imgproxy (\u003e= 3.3.0, \u003c 4.0.16)"],"_cs_severities":["low"],"_cs_tags":["denial-of-service","image-processing","memory-exhaustion"],"_cs_type":"advisory","_cs_vendors":["imgproxy"],"content_html":"\u003cp\u003eimgproxy versions 3.3.0 through 4.0.15 are affected by an unbounded memory allocation vulnerability (CVE-2026-123616) in the ICO image processing module. The loader fails to validate the \u003ccode\u003edata_size\u003c/code\u003e field in processed ICO files. An attacker can submit a crafted 23-byte ICO file specifying a \u003ccode\u003edata_size\u003c/code\u003e of approximately 4GB, causing the service to allocate excessive memory, leading to worker process exhaustion and crashes.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a denial-of-service condition for the imgproxy instance by inducing memory exhaustion and crashing worker processes.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade imgproxy instances to version 4.0.16 or later to include the mandatory validation of the \u003ccode\u003edata_size\u003c/code\u003e field in the ICO loader.\u003c/li\u003e\n\u003cli\u003eImplement request body size limits at the load balancer or reverse proxy level (e.g., Nginx \u003ccode\u003eclient_max_body_size\u003c/code\u003e) if immediate patching is not feasible, though this will not prevent the specific vulnerability if small-file payloads are allowed.\u003c/li\u003e\n\u003cli\u003eMonitor logs for repeated worker process restarts or high memory usage spikes correlated with image processing tasks.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-08T11:21:16Z","date_published":"2026-11-08T11:21:16Z","id":"https://feed.craftedsignal.io/briefs/2026-11-imgproxy-memory-exhaustion/","summary":"An unauthenticated attacker can exploit an unbounded memory allocation vulnerability in the imgproxy ICO loader to trigger process crashes and denial-of-service via malformed file uploads.","title":"imgproxy: Unbounded memory allocation in ICO loader (CVE-2026-123616)","url":"https://feed.craftedsignal.io/briefs/2026-11-imgproxy-memory-exhaustion/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:imgproxy:imgproxy:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}