2 ms·
Weird to see this downvoted since this has actually happened: https://nvd.nist.gov/vuln/detail/cve-2023-4863 https://nvd.nist.gov/vuln/detail/cve-2023-4863 Web
by Lammy 2y ago
Weird to see this downvoted since this has actually happened: https://nvd.nist.gov/vuln/detail/cve-2023-4863 https://nvd.nist.gov/vuln/detail/cve-2023-4863
WebP might support GIF-like animation, but since it's just one feature of an incredibly-complicated codec it invites a huge attack surface with extremely wide range since 99% of people will use libwebp. GIF89a on the other hand is simple enough that lots of people can write a working decoder.
- autoexec 2y agoIt's happened multiple times over a large number of formats. Even gifs have been exploited (https://www.zdnet.com/article/whatsapp-vulnerability-exploited-through-malicious-gifs-to-hijack-chat-sessions/ https://www.zdnet.com/article/whatsapp-vulnerability-exploit...), but just as you said it's the complexity of video that makes it more difficult to keep secure.