On: The WebP vulnerability: a tale of a CVE with much ...

[devwastaken]

Webp is one in a series of exploits that will come to pass in all codecs. Media codecs are made without regard to safety and overwhelmingly rely on handmade assembly or hardware implementations.

As usual most of this issue is resolved by using languages that can be memory safe.

[Dwedit → devwastaken]

This problem wasn't even in the bulk pixel handling code that would be written in assembly or using vector instructions.