Vendor

imgproxy

5 known vulnerabilities.

Products

imgproxy 4 imgproxy/imgproxy 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2026-123614

imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. Attackers can submit a crafted ICO image whose data_size wraps the allocation in vip…

imgproxy imgproxy github.com/imgproxy/imgproxy/v2 github.com/imgproxy/imgproxy/v3 Go

Nov 8, 2026