Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Blasting Past Webp

projectzero.google | blog | #fuzzing | #exploit | #memory-corruption | #image-parsing | #libwebp | #webp

Summary

A deep dive into WebP image parsing and libwebp exploitation, tracing how memory corruption in the codec can be weaponized and why it became such a widely targeted surface.
Published
Collected

original ↗

Related coverage

blog · bughunters.google.com
CVR: The Mines of Kakadûm
Google's CVR team details memory corruption bugs in the Kakadu JPEG 2000 image library and shows how 'Conditional Corruption' overcomes environment constraints to achieve remote code execution.
Critical · vulnerability · github.com
Heap buffer overflow in scale_nearest_neighbor() via duplicate Alpha planes from nested iden/auxl items
A critical, network-reachable image-decoding flaw can turn an attacker-supplied HEIC/HEIF/AVIF file into code execution; upgrade libheif to v1.23.2.
blog · projectzero.google
On the Effectiveness of Mutational Grammar Fuzzing
A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.
blog · projectzero.google
The Windows Registry Adventure #7: Attack surface analysis
Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.
blog · projectzero.google
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.
blog · projectzero.google
Simple macOS kernel extension fuzzing in userspace with IDA and TinyInst
A practical recipe for fuzzing macOS kernel extensions in userspace by combining IDA-assisted harnessing with TinyInst, lowering the cost of finding driver bugs.
back