CVE-2026-70351

Summary

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.

Affected Software

VendorProductVersion RangeStatus
MicrosoftWebP Image Extension1.0.0.0 < 1.2.31.0affected

Weaknesses

  • CWE-190: CWE-190: Integer Overflow or Wraparound
  • CWE-122: CWE-122: Heap-based Buffer Overflow

References