102 matches found
CVE-2026-91802
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...
EUVD-2026-85120
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...
CVE-2026-91802
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader within its WebP image decoding functionality. The vulnerability is caused by the improper handling of bitmap stride and target buffer formats , which could lead to an application crash if successfully exploited. No s...
Microsoft WebP Image Extension < 1.2.31.0 RCE (CVE-2026-70351) (September 2026)
The version of the Microsoft WebP Image Extension app installed on the remote Windows host is prior to 1.2.31.0. It is, therefore, affected by a remote code execution vulnerability: - Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code...
CVE-2026-70351
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-70351
CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...
Microsoft WebP Image Extension Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-70351: Integer Overflow or Wraparound
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-7311: Improper Limitation of a Pathname to a Restricted Directory
The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteconvertedimagesize function in all versions up to, and including, 3.6.13. This makes it possible for authenticated attackers, with...
EUVD-2026-39550
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size...
CVE-2026-33813
A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service DoS...
SUSE CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
EUVD-2026-24247
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
GO-2026-4961 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
CVE-2026-33813: Undefined Security Weakness
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...
PT-2026-34050
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Parsing a WEBP image with an invalid, large size causes a panic on 32-bit platforms. Recommendations At the moment, there is no information about a newer version...
CVE-2026-24530 WordPress WebP Conversion plugin <= 2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through = 2.2...