libwebp

Mirror only. Please do not send pull requests. See https://chromium.googlesource.com/webm/libwebp/+/HEAD/CONTRIBUTING.md. (by webmproject)

Libwebp Alternatives

Similar projects and alternatives to libwebp

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better libwebp alternative or higher similarity.

libwebp reviews and mentions

Posts with mentions or reviews of libwebp. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-09-26.
  • Google assigns a CVE for libwebp and gives it a 10.0 score
    5 projects | news.ycombinator.com | 26 Sep 2023
    The thing that concerns me most is looking at the fix it is very difficult to see why this fix is correct. It also appears as there is lots of code without explicit bounds checks. It makes me worried because while the logic may be safe this makes the logic very complex. I wonder what the cost would be to add an explicit, local bounds check at every array access. This would serve as a backup that is much easier to verify. I suspect the cost would be relatively small. Small enough that I personally would be happy to pay it.

    https://github.com/webmproject/libwebp/commit/902bc919033134...

    This is also a great reminded that fuzzing isn't a solution to memory unsafe languages and libraries. If anything the massive amount of bugs found via fuzzing should scare us as it is likely only scratching the surface of the vulnerabilities that still lie in the code, a couple too many branches away from being likely to be found by fuzzing.

  • The WebP 0day
    6 projects | news.ycombinator.com | 21 Sep 2023
    There's a follow-up fix, according to Debian[0]: https://github.com/webmproject/libwebp/commit/95ea5226c87044...

    [0]: https://security-tracker.debian.org/tracker/CVE-2023-4863

  • CVE-2023-4863: Heap buffer overflow in WebP (Chrome)
    18 projects | news.ycombinator.com | 12 Sep 2023
    The breakage [0] was introduced by the creator [1] of the project. If you want to audit 1674 commits over the past 12 years, it'd be easier to just audit the full project.

    [0] https://github.com/webmproject/libwebp/commit/21735e06f7c1cb...

    [1] https://github.com/webmproject/libwebp/commit/c3f41cb47e5f32...

  • Convenient CPU feature detection and dispatch in the Magnum Engine
    9 projects | /r/cpp | 2 Aug 2022
  • Whats going on with .webp and why are more and more internet images being converted to it?
    2 projects | /r/OutOfTheLoop | 16 Jun 2022
    If you like the command line, then you can use ffmpeg and ImageMagick, or use libwebp directly
  • What's up with people hating WebP?
    1 project | /r/OutOfTheLoop | 26 Apr 2022
    The webp parser code is open source. Which means that even if Google decides to hide/obscure the code for webp, they'd legally not be allowed to prevent you from using older versions of the webp parser library. The only thing they could do is patent it, and then companies in the US (which has software patents, unfortunately) would have to pay royalties to decode it anyway; but here comes the next point
  • A note from our sponsor - WorkOS
    workos.com | 24 Apr 2024
    The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Stats

Basic libwebp repo stats
13
1,907
8.7
11 days ago

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com