{"id":"CVE-2026-59959","revision":"63036d14e4ce426cbf80ebbfd4501d80","records":[{"revision":"63036d14e4ce426cbf80ebbfd4501d80","observedAt":"2026-10-29T19:28:49.708+00:00","statement":{"source":"cve-program","id":"CVE-2026-59959","aliases":[],"title":"SAIL: WebP decoder division by zero through malformed animated canvas metadata","description":"SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or `ANMF` frame metadata. In `sail_codec_load_init_v8_webp()` in `src/sail-codecs/webp/webp.c`, `WebPDemuxGetI` with `WEBP_FF_CANVAS_WIDTH` can return a zero `image_local->width`, which is then used as a divisor when calculating `bytes_per_pixel` from the image row size. The division happens before frame decoding and before generic image skeleton validation in `src/sail/sail_advanced.c`, causing an arithmetic fault and process termination. Applications accepting untrusted WebP images can consequently suffer denial of service; builds must include the affected WebP codec. This issue is fixed in version 1.0.2.","state":0,"publishedAt":"2026-10-28T13:17:29.214+00:00","modifiedAt":"2026-10-29T18:39:38.355+00:00","affected":[{"ecosystem":"Vendor product","name":"sail","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"HappySeaFox\",\n                    \"product\": \"sail\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 1.0.2\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","score":4.8,"severity":"MEDIUM"}],"references":["https://github.com/HappySeaFox/sail/security/advisories/GHSA-5g8g-g347-84m8","https://github.com/HappySeaFox/sail/commit/495660135a4c62e416a1b357a4381dd30069229d","https://github.com/HappySeaFox/sail/tree/v1.0.2"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-59959","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-59959","identifiers":["CVE-2026-59959"]},"retained":false,"historicalAffected":[]}],"coverage":[]}