Skip to content
Critical Integer Overflow Vulnerability in imgproxy (CVE-2026-123614)

Critical Integer Overflow Vulnerability in imgproxy (CVE-2026-123614)

First seen 9 Nov 2026, 02:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 9, 2026 at 02:19 UTC
  • •imgproxy versions 4.0.0 to 4.0.15 are vulnerable to CVE-2026-123614.
  • •The vulnerability allows remote code execution or denial of service via crafted ICO images.
  • •A patch is available in version 4.0.16; immediate upgrade is recommended.

imgproxy versions 4.0.0 through 4.0.15 are affected by an integer overflow vulnerability in the ICO loader, which can lead to a heap buffer overflow. This flaw allows unauthenticated remote attackers to upload a crafted ICO image, potentially crashing the imgproxy process or executing arbitrary code with the application's privileges. A patch has been released in version 4.0.16, and users are urged to upgrade immediately. Currently, there is no evidence of public proof-of-concept or confirmed exploitation in the wild. The CVSS score for this vulnerability is 9.8, indicating a critical severity level. Network-level controls are recommended to restrict ICO image uploads to trusted sources.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5h ago How this analysis works

Timeline

2026-11-08
CVE-2026-123614 published
imgproxy disclosed an integer overflow vulnerability affecting versions 4.0.0 to 4.0.15, with a CVSS score of 9.8.
Feedly
2026-11-08
Patch released
imgproxy released version 4.0.16 to address the integer overflow vulnerability.
Sploitus

More articles in this cluster (6)

Following this threat?

Track CVE-2026-123614 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

What versions of imgproxy are affected?
imgproxy versions 4.0.0 through 4.0.15 are affected by CVE-2026-123614.
Is there evidence of exploitation?
Currently, there is no evidence of exploitation or public proof-of-concept for this vulnerability.
What should I do to protect my systems?
Upgrade imgproxy to version 4.0.16 or later immediately and consider implementing network controls for ICO image uploads.