Threats tagged 'ghsa-p65x-p3jr-w89f'

imgproxy versions from 4.0.0 up to but not including 4.0.16 contain an integer overflow vulnerability in the ICO image loader. This flaw allows remote attackers to craft ICO images with a manipulated data_size value that triggers a heap buffer overflow. Exploitation can lead to process crashes or potentially remote code execution.