Memory-Safe WebP Decoding
6 hours ago
- wpd is a faster, safer WebP decoder than libwebp, addressing vulnerabilities like CVE-2023-4863 that affected billions of devices.
- It is written in Rust with optional handwritten SIMD assembly, and can be compiled without assembly for fully verifiable memory safety.
- Performance benchmarks show wpd is faster than libwebp: 1.19x faster single-threaded lossy, 2.74x faster single-threaded lossless, and over 3x faster multi-threaded in some cases.
- wpd aims for feature parity with libwebp, supporting lossy/lossless WebP, animation, alpha, metadata extraction, multiple output formats, scaling, cropping, incremental decoding, multithreading, and more.
- It offers both a C ABI and Rust API, making it a drop-in replacement for libwebp in many applications.
- The project is open source under the BSD 2-Clause license and is part of a broader commitment to open source software.
- The team is exploring partnerships with cybersecurity firms and encourages community adoption and contributions.