WebP format has security issues
Moderators: helmut, XnTriq, xnview, Dreamer
WebP format has security issues
There is a security issue in webp format, which can produce a heap overflow.
All photo progams use an old webp library, which has this bug.
I think me must wait until the developer of the webp library has fixed the bug.
https://securityboulevard.com/2023/09/p ... tical-bug/
https://www.techtarget.com/searchsecuri ... nerability
All photo progams use an old webp library, which has this bug.
I think me must wait until the developer of the webp library has fixed the bug.
https://securityboulevard.com/2023/09/p ... tical-bug/
https://www.techtarget.com/searchsecuri ... nerability
PC: Intel 8700k + Asus Z370-F + 16 GB RAM G.Skill + Asus RTX 3050 OC + Samsung SSD
OS: Windows 10 Pro 64bit 22H2 |
GFX: XnViewMP 1.8.7 | XN-View 2.52.0 | XnConvert 1.104.0 | Adobe Photoshop Elements 2024 | Elements XXL 11 | Paint.Net 5.1.7
OS: Windows 10 Pro 64bit 22H2 |
GFX: XnViewMP 1.8.7 | XN-View 2.52.0 | XnConvert 1.104.0 | Adobe Photoshop Elements 2024 | Elements XXL 11 | Paint.Net 5.1.7
Re: WebP format has security issues
how do we install it?
I heard there are already exploits out there with prepared webp images?!
Re: WebP format has security issues
It is not possible to replace the libwebp.dll by yourself.
In the past you could use the library of XnConvert, if it used a newer library.
Please wait until the next release of XnviewMP.
P.S.: IrfanView 4.62 has the latest bug fixed webp 1.32. But you must install it manually.
It is not compatible with Xnviewmp.
In the past you could use the library of XnConvert, if it used a newer library.
Please wait until the next release of XnviewMP.
P.S.: IrfanView 4.62 has the latest bug fixed webp 1.32. But you must install it manually.
It is not compatible with Xnviewmp.
PC: Intel 8700k + Asus Z370-F + 16 GB RAM G.Skill + Asus RTX 3050 OC + Samsung SSD
OS: Windows 10 Pro 64bit 22H2 |
GFX: XnViewMP 1.8.7 | XN-View 2.52.0 | XnConvert 1.104.0 | Adobe Photoshop Elements 2024 | Elements XXL 11 | Paint.Net 5.1.7
OS: Windows 10 Pro 64bit 22H2 |
GFX: XnViewMP 1.8.7 | XN-View 2.52.0 | XnConvert 1.104.0 | Adobe Photoshop Elements 2024 | Elements XXL 11 | Paint.Net 5.1.7
Re: WebP format has security issues
thanks!
seems to work

Re: WebP format has security issues
Wonderful! Thank you so much! 

PC: Intel 8700k + Asus Z370-F + 16 GB RAM G.Skill + Asus RTX 3050 OC + Samsung SSD
OS: Windows 10 Pro 64bit 22H2 |
GFX: XnViewMP 1.8.7 | XN-View 2.52.0 | XnConvert 1.104.0 | Adobe Photoshop Elements 2024 | Elements XXL 11 | Paint.Net 5.1.7
OS: Windows 10 Pro 64bit 22H2 |
GFX: XnViewMP 1.8.7 | XN-View 2.52.0 | XnConvert 1.104.0 | Adobe Photoshop Elements 2024 | Elements XXL 11 | Paint.Net 5.1.7
Re: WebP format has security issues
Hello, is the webp plugin has 32bits?
XnView MP x64 newest version is 1.6.2 with libwebp 1.3.2
but XnView MP x32 newest version is 1.5.5 and the libwebp still 1.3.0
Thanks for your reading.
ps.A suggestion, nconvert x64 now include webp plugin but x32 don't, maybe it's better that nconvert x32 also include the webp plugin.

Re: WebP format has security issues
Here is with this versionkesdoputr wrote: Thu Nov 23, 2023 3:47 pm Hello, is the webp plugin has 32bits?
XnView MP x64 newest version is 1.6.2 with libwebp 1.3.2
but XnView MP x32 newest version is 1.5.5 and the libwebp still 1.3.0
okps.A suggestion, nconvert x64 now include webp plugin but x32 don't, maybe it's better that nconvert x32 also include the webp plugin.![]()
Pierre.
Re: WebP format has security issues
Thanks for the reply, it works great.xnview wrote: Fri Nov 24, 2023 9:04 amHere is with this versionkesdoputr wrote: Thu Nov 23, 2023 3:47 pm Hello, is the webp plugin has 32bits?
XnView MP x64 newest version is 1.6.2 with libwebp 1.3.2
but XnView MP x32 newest version is 1.5.5 and the libwebp still 1.3.0
okps.A suggestion, nconvert x64 now include webp plugin but x32 don't, maybe it's better that nconvert x32 also include the webp plugin.![]()
