CVE-2026-58586 Details

A heap buffer overflow vulnerability has been identified in the Image::WebP Perl module, specifically in versions through 0.2. This vulnerability arises because the module includes a vulnerable version of libwebp, specifically 0.3.0, which has multiple known vulnerabilities, including one that allows for a heap buffer overflow. The issue occurs when an untrusted WebP image is decoded, leading to an out-of-bounds memory write. Since the vulnerable libwebp version is bundled with Image::WebP and compiled into the module, upgrading the system's libwebp does not address the vulnerability.