zjupure / GlideWebpDecoder

A Glide WebpDecoder Intergration Library for decoding and displaying webp images
Apache License 2.0
747 stars 91 forks source link

Critical WebP bug: many apps, not just browsers, under threat #117

Closed krissGit closed 1 year ago

krissGit commented 1 year ago

Hi, Due to the below issue, is this going to impact this lib also? Link for ref: https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/

zjupure commented 1 year ago

libwebp should upgrade to lastest v1.3.2 and I will handle it recently

honglvt commented 1 year ago

so, when it will be fixed?

libwebp should upgrade to lastest v1.3.2 and I will handle it recently

zhujunjieyuewen commented 1 year ago

will the new version(libwebp upgraded to latest v1.3.2) be available in the next two weeks ?

rynop commented 1 year ago

@zjupure any update here? libwebp v1.3.2 was released on 2023-09-14

ChinaZeng commented 1 year ago

@zjupure 请问大佬,有更新吗?

zjupure commented 1 year ago

version 2.4 with libwebp v1.3.2 was released in MavenCentral, fixed in commit 0741dde84753c088e328f08f9f87efe5e81407b9