Skip to content
Threat Feed
Subscribe

Product

Imgproxy (>= 4.0.0, < 4.0.16)

1 brief RSS
critical advisory

imgproxy: Heap buffer overflow in ICO loader (CVE-2026-123614)

imgproxy versions 4.0.0 through 4.0.15 contain an integer overflow in the ICO image loader, enabling remote attackers to trigger heap memory corruption leading to potential code execution.

exploited imgproxy cve-2026-123614 integer-overflow memory-corruption remote-code-execution
1t 1c 1i