CVE ID :CVE-2026-123616 Published : Nov. 8, 2026, 2:16 a.m. | 57 minutes ago Description :imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the data_size field. Attackers can supply a crafted 23-byte ICO file...

#Sicherheitslücke #Malware

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-123616 - imgproxy 3.3.0 before 4.0.16 Memory Exhaustion DoS via ICO Loader

VERWANDTEARTIKEL

CVE-2026-114713 - UnrealIRCd IRCv3 Label Message Tag Command Injection

CVE-2026-123615 - imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader

CVE-2026-123614 - imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

CVE-2026-123604 - Hickory DNS 0.26.0-beta.1 before 0.26.2 Resource Exhaustion DoS via NameServerPool::try_send TC-Retry Loop

CVE-2026-123605 - Hickory DNS through 0.25.0-alpha.3 DNSSEC Validation Bypass via RRSIG Signer's Name

CVE-2026-123606 - Hickory-DNS Recursor 0.25.0-alpha.3 through 0.25.2 Glueless-NS Referral Amplification