WebP format has security issues

[masterjp]

There is a security issue in webp format, which can produce a heap overflow.
All photo progams use an old webp library, which has this bug.
I think me must wait until the developer of the webp library has fixed the bug.

https://securityboulevard.com/2023/09/p ... tical-bug/

https://www.techtarget.com/searchsecuri ... nerability

[xnview]

it's fixed in libwebp v1.3.2

[viewerr]

it's fixed in libwebp v1.3.2

how do we install it?
I heard there are already exploits out there with prepared webp images?!

[masterjp]

It is not possible to replace the libwebp.dll by yourself.
In the past you could use the library of XnConvert, if it used a newer library.

Please wait until the next release of XnviewMP.

P.S.: IrfanView 4.62 has the latest bug fixed webp 1.32. But you must install it manually.
It is not compatible with Xnviewmp.

[xnview]

please try to replace with this version

[viewerr]

please try to replace with this version

thanks!
seems to work

[masterjp]

Wonderful! Thank you so much!

[kesdoputr]

please try to replace with this version

Hello, is the webp plugin has 32bits?
XnView MP x64 newest version is 1.6.2 with libwebp 1.3.2
but XnView MP x32 newest version is 1.5.5 and the libwebp still 1.3.0

Thanks for your reading.

ps.A suggestion, nconvert x64 now include webp plugin but x32 don't, maybe it's better that nconvert x32 also include the webp plugin.

[xnview]

Hello, is the webp plugin has 32bits?
XnView MP x64 newest version is 1.6.2 with libwebp 1.3.2
but XnView MP x32 newest version is 1.5.5 and the libwebp still 1.3.0

Here is with this version

ps.A suggestion, nconvert x64 now include webp plugin but x32 don't, maybe it's better that nconvert x32 also include the webp plugin.

ok

[kesdoputr]

Hello, is the webp plugin has 32bits?
XnView MP x64 newest version is 1.6.2 with libwebp 1.3.2
but XnView MP x32 newest version is 1.5.5 and the libwebp still 1.3.0

Here is with this version

ps.A suggestion, nconvert x64 now include webp plugin but x32 don't, maybe it's better that nconvert x32 also include the webp plugin.

ok

Thanks for the reply, it works great.