Memory Corruption Vulnerability in WebP Image Decoding of SAIL Image Decoding Library

CVE-2025-52456

What is CVE-2025-52456?

A memory corruption vulnerability in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8 allows an attacker to exploit specially crafted .webp animations. This exploitation can trigger an integer overflow during stride calculation, leading to a heap-based buffer overflow when decoding the image. An attacker must induce the library to process a malicious file to successfully exploit this vulnerability, potentially resulting in remote code execution.

References