CVE-2019-13655: Imgix

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory.

Affected products

• Imgix Imgix: up to and including 2019-06-19

Published 2019-07-29. Last modified 2026-06-17.