Millions of people in the world are affected by this library, 10 times over for every devices and apps they use.

I'm sorry but I call for libraries used by millions around the world to NOT use C. And I love C... But this risk ratio is off the charts and they ought to not use C for such critical libraries.

Even as a C guru, you are going to make a mistake, at some point.

I think this is the fix https://github.com/webmproject/libwebp/commit/dce8397fec159c...

"malloc fail"? :facepalm: (oh yes, Slack, Discord, Teams, everything is affected, including all modern OS).