CVE-2026-123615 - imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader
CVE ID :CVE-2026-123615 Published : Nov. 8, 2026, 2:16 a.m. | 57 minutes ago Description :imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reconstruction (vips_foreign_load_ico_header in vips/icoload.c) when an ICO entry declares a tiny...