Google assigns a CVE for libwebp and gives it a 10.0 score :

In case you missed the news, there's a critical 0day in WebP (a heap buffer overflow in the libwepb library) floating about, which was initially issued as

Related Keywords

Ben Hawkes , Google , Webp Codec , Red Hat , Project Zero ,