Skip to content

CVE-2026-123614

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 8, 2026
Last Seen
November 8, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Integer Overflow Vulnerability in imgproxy (CVE-2026-123614)70.5

imgproxy versions 4.0.0 through 4.0.15 are affected by an integer overflow vulnerability in the ICO loader, which can lead to a heap buffer overflow. This flaw allows unauthenticated remote attackers to upload a crafted ICO image, potentially crashing the imgproxy process or executing arbitrary code...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

MalwareCWE-122 - Heap-based Buffer OverflowCWE-190 - Integer Overflow Or Wraparound