CVE-2022-36752: PNG2WEBP Project PNG2WEBP

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file.

Affected products

• PNG2WEBP Project PNG2WEBP: version 1.0.4 only

Published 2022-07-28. Last modified 2026-06-17.