 |
| The WebP 0day (blog.isosceles.com) | ||
| recommended by 1 user | 2023 | 2 points by benhawkes | vulns & breaches | original thread | | ||
| One user recommended this thread. What they said: |
| jsnell Sep 26, 2023 | on: Google assigns a CVE for libwebp and gives it a 10.0 score | context |
| Also recommended by people who recommended this: | ||
| 1. | Parsing Protobuf like never before (mcyoung.xyz) | |
| recommended by 1 user | 2025 | 248 points by ibobev | original thread | | ||
There was a great explanation a few days back on why the vulnerability existed, and on why the fix was correct: https://blog.isosceles.com/the-webp-0day/
(Discussed in https://news.ycombinator.com/item?id=37600852)