CVE-2017-18235: Exempi Project Exempi

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp does not ensure nonzero widths and heights, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted .webp file.

Affected products

• Exempi Project Exempi: before 2.4.3 (fixed in 2.4.3)

Published 2018-03-15. Last modified 2026-06-17.