CVE-2026-3707 Details
Description
A vulnerability was identified in MrNanko webp4j up to 1.3.x. The affected element is the function DecodeGifFromMemory of the file src/main/c/gif_decoder.c. Such manipulation of the argument canvas_height leads to integer overflow. Local access is required to approach this attack. The exploit is publicly available and might be used. The name of the patch is 89771b201c66d15d29e4cc016d8aae82b6a5fbe1. It is advisable to implement a patch to correct this issue.
A heap buffer overflow vulnerability has been identified in the MrNanko webp4j library, specifically in versions up to 1.3.x. The issue arises in the GIF decoding function 'DecodeGifFromMemory', located in 'src/main/c/gif_decoder.c'. The vulnerability is caused by improper handling of the 'canvas_height' parameter, leading to an integer overflow. This flaw allows for a remote denial-of-service attack and potentially facilitates remote code execution.
Users are advised to update to webp4j version 2.1.1, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 8, 2026CISA-ADP
Assessed Mar 10, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MrNanko/webp4j/ | [email protected] | ProductSource CodeVendor |
| https://github.com/MrNanko/webp4j/commit/89771b201c66d15d29e4cc016d8aae82b6a5fbe1 | [email protected] | Source CodeVendor |
| https://github.com/MrNanko/webp4j/issues/6 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/MrNanko/webp4j/issues/6#issuecomment-3941945014 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/Sp1d3rL1/Webp4j-Heap-Buffer-Overflow/blob/main/README.EN.md | [email protected] | ExploitTechnical Analysis |
| https://vuldb.com/?ctiid.349653 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/?id.349653 | [email protected] | AdvisoryBundleExploitRemedy |
| https://vuldb.com/?submit.765972 | [email protected] | ExploitTechnical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-189 | Numeric Errors | [email protected] |
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MrNanko webp4j | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Mar 8, 2026 | New CVE Received | [email protected] |