Skip to content
Threat Feed
Subscribe

Product

Imgproxy (< 4.0.16)

1 brief RSS
critical advisory

imgproxy: Heap buffer overflow in ICO loader (CVE-2026-123614)

imgproxy versions 4.0.0 through 4.0.15 contain an integer overflow in the ICO image loader, enabling remote attackers to trigger heap memory corruption leading to potential code execution.

exploited PoC imgproxy +1 cve-2026-123614 integer-overflow memory-corruption remote-code-execution
1t 3c 1i