CVE-2026-91802

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...

CVE-2026-91802 Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Confusion

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...

EUVD-2026-85120

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...

CVE-2026-91802

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader within its WebP image decoding functionality. The vulnerability is caused by the improper handling of bitmap stride and target buffer formats , which could lead to an application crash if successfully exploited. No s...

CVE-2026-91802 Foxit PDF Editor/Reader — Heap Buffer Overflow in WebP Image Decoding via Bitmap Stride Confusion

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...

CVE-2026-91802: Out-of-bounds Write

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...

PT-2026-97221

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during WebP image decoding due to improper handling of bitmap stride and target buffer formats. This issue can lead to an application...

Microsoft WebP Image Extension < 1.2.31.0 RCE (CVE-2026-70351) (September 2026)

The version of the Microsoft WebP Image Extension app installed on the remote Windows host is prior to 1.2.31.0. It is, therefore, affected by a remote code execution vulnerability: - Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code...

CVE-2026-70351

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-70351

CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...

Microsoft WebP Image Extension Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-70351: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-7311: Improper Limitation of a Pathname to a Restricted Directory

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteconvertedimagesize function in all versions up to, and including, 3.6.13. This makes it possible for authenticated attackers, with...

EUVD-2026-39550

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size...

CVE-2026-33813

A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service DoS...

SUSE CVE-2026-33813

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

CVE-2026-33813

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

EUVD-2026-24247

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

CVE-2026-33813

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

CVE-2026-33813

The golang.org/x/image package is vulnerable to a panic when parsing a WEBP image with an invalid, large size on 32-bit platforms . This vulnerability can lead to remote service interruptions . The issue is addressed in golang.org/x/image/webp version v0.39.0 . Affected applications include rclon...