CVE-2026-123614Critical· 9.8▾ Midnightimgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the allocation in vips/icoload.c, corrupting heap memory to crash the process or achieve code execution.
imgproxy >= 4.0.0 < 4.0.16Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
GHSA-hff9-5pqw-6w9fCritical· 9.8imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
CVE-2026-123616High· 7.5imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader
CVE-2026-123615High· 7.5imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader
CVE-2026-105708Medium· 4.3A flaw has been found in imgproxy up to 4.0.17
GO-2026-6897Noneimgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/img…
CVE-2025-15059High· 7.8GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability