CVE-2026-123616 | imgproxy up to 4.0.15 ICO Loader data_size memory allocation

November 8, 2026 Yanac

A vulnerability was found in imgproxy up to 4.0.15. It has been declared as problematic. Affected by this issue is some unknown functionality of the component ICO Loader. The manipulation of the argument data_size results in uncontrolled memory allocation.

This vulnerability is cataloged as CVE-2026-123616. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More