{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/imgproxy--4.0.16/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:imgproxy:imgproxy:4.0.0:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-123614"},{"id":"CVE-2026-123615"},{"id":"CVE-2026-123616"}],"_cs_exploited":true,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-123614\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["imgproxy (\u003e= 4.0.0, \u003c 4.0.16)","imgproxy (\u003c 4.0.16)"],"_cs_severities":["critical"],"_cs_tags":["cve-2026-123614","integer-overflow","memory-corruption","remote-code-execution"],"_cs_type":"advisory","_cs_vendors":["imgproxy"],"content_html":"\u003cp\u003eimgproxy versions 4.0.0 to 4.0.15 are affected by an integer overflow vulnerability in the ICO image loader component. An attacker can craft an ICO image with a specifically manipulated data_size parameter. When processed by the application, this value triggers an integer overflow in the memory allocation logic within the vips/icoload.c source file. This results in a heap buffer overflow, which can be leveraged to crash the service (Denial of Service) or execute arbitrary code.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote, unauthenticated attackers to cause a process crash or potentially achieve remote code execution on the server running imgproxy.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade imgproxy to version 4.0.16 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit logs for repeated crashes or unusual memory spikes associated with the imgproxy service, which may indicate exploitation attempts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-08T07:18:11Z","date_published":"2026-11-08T02:55:39Z","id":"https://feed.craftedsignal.io/briefs/2026-11-08-imgproxy-cve-2026-123614/","summary":"imgproxy versions 4.0.0 through 4.0.15 contain an integer overflow in the ICO image loader, enabling remote attackers to trigger heap memory corruption leading to potential code execution.","title":"imgproxy: Heap buffer overflow in ICO loader (CVE-2026-123614)","url":"https://feed.craftedsignal.io/briefs/2026-11-08-imgproxy-cve-2026-123614/"}],"language":"en","title":"CraftedSignal Threat Feed - Imgproxy (\u003c 4.0.16)","version":"https://jsonfeed.org/version/1.1"}