CVE-2026-123614

Vendor

Imgproxy

Product

imgproxy

CVSS v3.1

9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-122

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 33
   CVE NVD 4h ago

   imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a…

   imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose…

   CVSS 9.8 CVE-2026-123614 Imgproxy