Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:imgproxy:imgproxy:4.0.0:*:*:*:*:*:*:*

1 brief RSS
critical advisory

imgproxy: Heap buffer overflow in ICO loader (CVE-2026-123614)

imgproxy versions 4.0.0 through 4.0.15 contain an integer overflow in the ICO image loader, enabling remote attackers to trigger heap memory corruption leading to potential code execution.

exploited imgproxy cve-2026-123614 integer-overflow memory-corruption remote-code-execution
1t 1c 1i