CVE-2026-123614 imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted datasize value. Attackers can submit a crafted ICO image whose datasize wraps the allocation in vips/icoload.c, corrupting heap memory to...

CVE-2026-123614

The imgproxy software (versions 4.0.0 to 4.0.16) is vulnerable to a heap buffer overflow caused by an integer overflow within the ICO loader component. A remote attacker can trigger this vulnerability by submitting a specially crafted ICO image with a manipulated data_size value. This overflow oc...

PT-2026-139896

imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reconstruction vips foreign load ico header in vips/icoload.c when an ICO entry declares a tiny data size, causing unvalidated header fields to be read and written past the allocated buffer...

CLEANSTART-2024-AX27684 im_vips2dz in /libvips/libvips/deprecated/im_vips2dz

Security vulnerability affects the vips package. imvips2dz in /libvips/libvips/deprecated/imvips2dz...

GHSA-494M-4556-WF5P imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash

Summary Out-of-bounds heap write in imgproxy's ICO loader vips/icoload.c: when the ICO entry's image data buffer is small, the loader's BMP-header-reconstruction writes land past the allocation, corrupting the size field of the following heap chunk. The worker then aborts deterministically glibc...

imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash

Summary Out-of-bounds heap write in imgproxy's ICO loader vips/icoload.c: when the ICO entry's image data buffer is small, the loader's BMP-header-reconstruction writes land past the allocation, corrupting the size field of the following heap chunk. The worker then aborts deterministically glibc...

GHSA-MMQ5-XM89-9PFG imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

Summary Unbounded and unvalidated memory allocation in imgproxy's ICO loader vips/icoload.c. An attacker-controlled datasize field u32 from the ICO directory entry is passed directly to VIPSMALLOC without any bounds check, so a single crafted 23-byte ICO file makes an imgproxy worker attempt a 4G...

imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field

Summary Unbounded and unvalidated memory allocation in imgproxy's ICO loader vips/icoload.c. An attacker-controlled datasize field u32 from the ICO directory entry is passed directly to VIPSMALLOC without any bounds check, so a single crafted 23-byte ICO file makes an imgproxy worker attempt a 4G...

CVE-2026-114113

A flaw was found in sharp. The library includes a bundled version of libvips affected by multiple vulnerabilities within its GIF, TIFF, and VIPS image decoders. An attacker can exploit this by supplying a specially crafted image file to an application processing untrusted input, which may lead to...

Dependency on Vulnerable Third-Party Component

Overview org.webjars.npm:sharp is a High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images Affected versions of this package are vulnerable to Dependency on Vulnerable Third-Party Component via the bundled libvips image decoding library,...

CVE-2026-114113

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

CVE-2026-114113 Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

CVE-2026-114113 Sharp before 0.35.0 Multiple Vulnerabilities via Bundled libvips Image Decoders

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

EUVD-2026-106916

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

CVE-2026-114113

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

CVE-2026-114113

Versions of Sharp prior to 0.35.0 are vulnerable to multiple flaws because they bundle a version of libvips with compromised GIF , TIFF , and VIPS image decoders. An attacker can trigger these underlying vulnerabilities (CVE-2026-33327 , CVE-2026-33328 , CVE-2026-35590 , CVE-2026-35591 , and CVE-...

Lovell Fuller sharp security vulnerability

Versions of Lovell Fuller Sharp prior to 0.35.0 contain a security vulnerability. This vulnerability stems from multiple flaws in the bundled libvips within its GIF, TIFF, and VIPS image decoders. Attackers can supply specially crafted GIF, TIFF, or VIPS files to applications utilizing Sharp to...

PT-2026-120239

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

Debian dsa-6552 : gir1.2-vips-8.0 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6552 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6552-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DSA 6552-1] vips security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6552-1 [email protected] https://www.debian.org/security/ Tianyu Chen October 11, 2026 https://www.debian.org/security/faq -...