CVE-2026-33813

CVE-2026-33813 is a denial-of-service vulnerability affecting WEBP image parsing functionality on 32-bit platforms, where processing specially crafted images with invalid large size parameters causes the application to panic and crash. The vulnerability has a CVSS score of 7.5 (HIGH) with a network-based attack vector requiring no privileges or user interaction, making it trivially exploitable by remote attackers. The impact is limited to availability, as successful exploitation results in service disruption through denial of service with no confidentiality or integrity compromise. Currently, there is no evidence of active exploitation in the wild, and the vulnerability is not tracked on the Known Exploited Vulnerabilities (KEV) catalog, indicating minimal real-world threat activity at this time. The FAUCET Risk Score of 38.0/100 and extremely low EPSS score suggest this vulnerability presents a below-average risk relative to other CVEs and warrants standard patching procedures rather than emergency response.