webp-CVE-2023-4863

libwebp CVE-2023-4863 一个可以黑掉全世界的漏洞 - CVE-2023-4863 8秒内发现.webp漏洞（使用AFL++进行模糊测试）...

CVE-2022-26711

CVE-2022-26711: Apple ImageIO WebP 整数溢出漏洞 Apple ImageIO 框架在解析 WebP 图像时存在一个整数溢出漏洞，导致越界内存访问。 完整漏洞分析 - 包含反汇编的详细根本原因分析。 概述 在处理畸形 WebP 图像时，行字节计算期间发生整数溢出。溢出导致分配了过小的缓冲区，随后在图像解码期间被覆盖。 处理恶意构造的 WebP 图像可能导致在任意使用 ImageIO 的应用程序（Safari、预览、邮件、信息、快速查看等）中执行任意代码。 | 受影响| 已修复 ---|---|--- macOS| Monterey 12.4| 12.4...

Linux Distros Unpatched Vulnerability : CVE-2026-33813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Parsing a WEBP image with an invalid, large size panics on 32-bit platforms. CVE-2026-33813 Note that Nessus relies on the presence of the package as reported b...

CVE-2026-33813

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

UBUNTU-CVE-2026-33813

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

CVE-2026-33813

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

Google Go 安全漏洞

Google Go is a static, strongly typed, compiled, concurrent programming language with garbage collection features from Google, Inc. of the United States. There is a security vulnerability in Google Go, which stems from the webp parsing function in golang.org/x/image, which may cause 32-bit platfo...

golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing

A flaw was found in golang.org/x/image. A remote attacker could exploit this vulnerability by providing a specially crafted WEBP image with an invalid, large size. This could cause the application to panic and crash on 32-bit platforms, leading to a Denial of Service DoS...

GO-2025-3599 bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing in github.com/bep/imagemeta

bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing in github.com/bep/imagemeta...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the bufferedReader function in io.go, when parsing PNG and WebP files. An attacker can cause denial of service by sending malicious images that trigger large memory allocations...

GHSA-FMHH-RW3H-785M bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing

Impact The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably high for image metadata. Before v0.11.0, If you didn't trust the input images, this could be abused to...

CVE-2025-32025 bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing

bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably...

CVE-2025-32025 bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing

bep/imagemeta is a Go library for reading EXIF, IPTC and XMP image meta data from JPEG, TIFF, PNG, and WebP files. The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably...

CVE-2025-32025

The CVE affects the Go library bep/imagemeta used for reading EXIF/IPTC/XMP metadata from JPEG, TIFF, PNG, and WebP. Before v0.11.0, the PNG/WebP metadata parsing allocated buffers unbounded by input type, enabling potentially large memory usage and DoS if provided images aren’t trusted. v0.11.0 ...