Chrome: Heap buffer overflow in WebP
This is why I’m more sympathetic to browser developers being slow to adopt new formats. WebP is a marginal advantage over JPEG (mostly transparency) which hasn’t seen much success but now that’s translated into multiple high-priority security holes and we’re all going to be spending the next month deploying patches everywhere which links against libwebp.That doesn’t mean we shouldn’t do new things but I think as developers we’re prone to underestimate the cost pretty heavily.