PublicCVE

CVE-2026-46601

HIGH7.5JSON exportCreate alert

Description

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

CVSS breakdown

CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High