What’s Vulnerable › Vulnerabilities

CVE-2022-36752

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-07-28 · updated 2026-06-17
• Weakness: CWE-787

Description

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file.

Affected products

• Png2Webp Project Png2Webp: 1.0.4

References

• https://github.com/landfillbaby/png2webp/commit/8f21ad79b0cd98fc22d5b49734543101946abbff
• https://github.com/landfillbaby/png2webp/issues/3
• https://github.com/landfillbaby/png2webp/commit/8f21ad79b0cd98fc22d5b49734543101946abbff
• https://github.com/landfillbaby/png2webp/issues/3

Get alerted when CVE-2022-36752 or the next vulnerability affects your stack