CVE-2026-123614
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Nov 08, 2026
Vendor
unknown
Description
imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the allocation in vips/icoload.c, corrupting heap memory to crash the process or achieve code execution.