Denial of Service Vulnerability in SAIL Image Processing Library

CVE-2026-59959

What is CVE-2026-59959?

The SAIL image processing library, utilized for managing images that support animation and metadata, is susceptible to a denial of service vulnerability due to a flaw in its WebP decoder. When processing a malformed animated WebP file, the library may encounter an arithmetic fault that leads to a crash. Specifically, the bug arises in the function sail_codec_load_init_v8_webp() within the WebP codec. If the decoding encounters zero as the width of the image, it results in a division error when calculating bytes per pixel. This issue creates an opportunity for untrusted WebP image files to cause the application to terminate unexpectedly. Users are urged to update to version 1.0.2 or later to mitigate this vulnerability.

References