Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-59959— SAIL: WebP decoder division by zero through malformed animated canvas metadata

Quick assessment

Affected
HappySeaFox sail
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SAIL 是一个跨平台库，支持图像的加载与保存，并具备动画、元数据及 ICC 配置文件的支持。在 1.0.2 版本之前，其内置的 WebP 解码器在加载初始化阶段，若处理存在容器结构不一致或 帧元数据错误的畸形动画 WebP 文件，可能会发生崩溃。具体而言，在 的 函数中，调用 并传入 时，可能返回零值的 ；该零值随后被用作除数，用于根据图像行大小计算 。此除法操作发生在帧解码之前，也早于 中通用的图像骨架验证步骤，从而引发算术异常并导致进程终止。因此，接受不可信 WebP 图像的应用程序可能遭受拒绝服务（DoS）

CVSS 4.8 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
HappySeaFox sail < 1.0.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-59959

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
SAIL: WebP decoder division by zero through malformed animated canvas metadata
Source: CVE Program / CVE List V5
Vulnerability Description
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed animated WebP file with inconsistent container or `ANMF` frame metadata. In `sail_codec_load_init_v8_webp()` in `src/sail-codecs/webp/webp.c`, `WebPDemuxGetI` with `WEBP_FF_CANVAS_WIDTH` can return a zero `image_local->width`, which is then used as a divisor when calculating `bytes_per_pixel` from the image row size. The division happens before frame decoding and before generic image skeleton validation in `src/sail/sail_advanced.c`, causing an arithmetic fault and process termination. Applications accepting untrusted WebP images can consequently suffer denial of service; builds must include the affected WebP codec. This issue is fixed in version 1.0.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
除零错误
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
HappySeaFox sail < 1.0.2 -

II. Public POCs for CVE-2026-59959

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-59959

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-59959 (1)

Vendor Pages for CVE-2026-59959 (1)

IV. Related Vulnerabilities

Same product: sail
Same vendor: HappySeaFox
Same weakness: CWE-369