Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
webmproject/libwebp
main @ 9c4a699
50
Fixes
0
CVEs
HIGH
Peak severity
41.2%
Coverage
Highlights
Integer Overflow: 29 prior fixes. Scrutinize any change in this area.
src/enc/vp8l.c: most-fixed (6 issues). Treat as high-risk during review.
39 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Multiple fixes target huff_image_size and histogram set allocation sizes using 32-bit multiplication, leading to undersized heap buffers and corruption. The same pattern recurs in encoder paths, indicating incomplete hardening.
Memory Corruption: The prediction transform repeatedly had out-of-bounds reads/writes due to insufficient scratch buffer sizing and incorrect tile handling. Three separate fixes were needed, showing the complexity and high risk of this transform.
Integer Overflow: Pointer arithmetic and stride calculations repeatedly overflow on 32-bit, causing out-of-bounds reads/writes. Fixes used 64-bit casts or tightened thresholds, but the pattern spans multiple decoder files.