CVE-2026-123614— imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

Quick assessment

Affected

imgproxy imgproxy

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

imgproxy 版本 4.0.0 至 4.0.16（不含 4.0.16）的 ICO 加载器中存在整数溢出漏洞。远程攻击者可利用此漏洞，通过构造恶意的值触发堆缓冲区溢出。具体而言，攻击者可提交一个精心构造的 ICO 图像，使其字段在中的内存分配环节发生回绕（wrap），从而破坏堆内存，导致进程崩溃或实现代码执行。

CVSS 9.8 · Critical Updated Nov 08, 2026

Possible ATT&CK Techniques 2 AI

T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

Source: CVE Program / CVE List V5

Vulnerability Description

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the allocation in vips/icoload.c, corrupting heap memory to crash the process or achieve code execution.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

堆缓冲区溢出

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
imgproxy	imgproxy	4.0.0 ~ 4.0.16	-

II. Public POCs for CVE-2026-123614

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-123614

请登录查看更多情报信息。

Other References for CVE-2026-123614 (2)

https://github.com/imgproxy/imgproxy/security/advisories/GHSA-hff9-5pqw-6w9f vendor-advisory
https://www.vulncheck.com/advisories/imgproxy-4.0.0-before-4.0.16-heap-buffer-overflow-via-ico-loader-integer-overflow third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-123614

Same Patch Batch · imgproxy · 2026-11-08 · 3 CVEs total

CVE-2026-123615	7.5 HIGH	imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader
CVE-2026-123616	7.5 HIGH	imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader

IV. Related Vulnerabilities

Same product: imgproxy

Same vendor: imgproxy

Same weakness: CWE-122