8.8
High
CVE-2026-70351 Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over…
Description
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebP Image Extension 1.0 | 1.0.0.0 → < 1.2.31.0 | 1.2.31.0 |