The WeBP and WeBP2 lib are a lot more tested than others format. I tried the official jxl lib and the heic tools, and I was able to identify bugs among these tools.
I'm pretty sure that you can find a buffer overflow in these decoders.
I'm pretty sure that you can find a buffer overflow in these decoders.
libwebp is relatively simple and clean C code, and has been around for over a decade. There are definitely scarier codec implementations than this.