Does Apose.Imaging lib use libwebp

Aspose.Imaging Product Family
1

Hi Aspose team,

We are using Aspose.Imaging library, does it use libwebp?

2

@Glority_Developer , Aspose.Imaging is not affected by this vulnerability, because we do not have dependency on libwebp which is C++ library, but
we own pure C# code written under webp specification and we do not have vulnerabilities as per the latest SonarQube analysis report. We created the issue IMAGINGNET-6700 to let team make more deep analysis and clarify the point.

3

@Glority_Developer
We have opened the following new ticket(s) in our internal issue tracking system and will deliver their fixes according to the terms mentioned in Free Support Policies.

Issue ID(s): IMAGINGNET-6700

You can obtain Paid Support Services if you need support on a priority basis, along with the direct access to our Paid Support management team.

4

@Glority_Developer , No vulnerabilities were identified when working with image-exploits in the Aspose.Imaging library.
Source image in github: https://github.com/mistymntncop/CVE-2023-4863
This image is detected by antivirus programs as a virus.
Example:
using(var ms = new MemoryStream())
using (var image = Image.Load(“bad.webp”))
{
image.Save(ms);
}