CVE-2026-90682

A flaw was found in Matthias-Wandel jhead. This vulnerability, a heap-based buffer overflow, exists within the WebP EXIF Handler component, specifically in the ProcessGpsInfo function. A local attacker could exploit this by manipulating the TAGGPSLAT or TAGGPSLONG arguments. Successful exploitati...

CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

EUVD-2026-77198

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

CVE-2026-90682

A heap-based buffer overflow in the ProcessGpsInfo function of gpsinfo.c (WebP EXIF Handler) affects Matthias-Wandel jhead up to 3.3 . Manipulation of the TAG_GPS_LAT/TAG_GPS_LONG arguments triggers the overflow. The attack vector is local with low privileges required, yielding partial impact on ...

CVE-2026-90682 Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

CVE-2017-0478

CVE-2017-0478 poc de CVE-2017-0478 El archivo FrameSequencewebp.cpp no está compilado actualmente en AOSP, por lo que cuando compiles libframesequence.so con webp, necesitas compilar con FRAMESEQUENCEINCLUDEWEBPcomo esto: FRAMESEQUENCEINCLUDEWEBP=true mm -B...

PT-2026-91045

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAG GPS LAT/TAG GPS LONG leads to heap-based buffer overflow. An attack has to be...

CVE-2023-4863

nivel 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error:...

CVE-2023-4863

CVE-2023-4863 root@kitploit: checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build...

WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect

WordPress WebP Converter for Media 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue. id: CVE-2021-25074 info: name: WordPress WebP Converter for Media 4.0.3 - Unauthenticated Open Redirect author:...

Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

stegano

Steganography by bzt Online demo In a nutshell, steganography is the art of hiding messages in another medium in plain sight without people realizing. This implementation reads in images in popular web formats WEBP, PNG, GIF, JPEG, hides the optionally encrypted text in them and saves the result ...

CVE-2023-4683-Test

CVE-2023-4683-Test Este repositorio contiene un POC fácil de usar para CVE-2023-4683. Simplemente haz git clone de este repositorio y extrae webp-test o ejecuta setup-webp-test.sh. webp-test ya contiene los archivos necesarios git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 de...

vulnerabilidad-LibWebP-CVE-2023-41064

vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...

webp-CVE-2023-4863

libwebp CVE-2023-4863 Una vulnerabilidad para hackear el mundo - CVE-2023-4863 Encontrando la vulnerabilidad .webp en 8s Fuzzing con AFL++...

CVE-2022-36752

Descripción para CVE-2022-36752 Se descubrió que png2webp v1.0.4 contiene una escritura fuera de los límites a través de la función w2p. Esta vulnerabilidad es explotable mediante un archivo webp manipulado al revertir el formato a png. Reproducción Para reproducir la vulnerabilidad, descargue la...

CVE-2026-70351

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

EUVD-2026-73078

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-70351

CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...

CVE-2017-0478

CVE-2017-0478 PoC de CVE-2017-0478 El archivo de FrameSequencewebp.cpp no está compilado en AOSP actualmente, por lo que cuando compiles libframesequence.so con webp, necesitas compilar con FRAMESEQUENCEINCLUDEWEBPcomo esto: FRAMESEQUENCEINCLUDEWEBP=true mm -B...