CVE-2026-123614

The imgproxy software (versions 4.0.0 to 4.0.16) is vulnerable to a heap buffer overflow caused by an integer overflow within the ICO loader component. A remote attacker can trigger this vulnerability by submitting a specially crafted ICO image with a manipulated data_size value. This overflow oc...