1. Knowledge Base
  2. SuperNova and Dolphin ScreenReader

Is SuperNova affected by the exploit in libwebp.dll?

A recent exploit has been discovered in the libwebp component which is common in web applications such as web browsers, WordPress, Twitch etc.

What is LibWebP?

LibWebP is a code library used to render and display images in the WebP format. WebP is an open-source raster graphics file format created by Google and designed to be more compressed, so load faster, than other online image formats like PNG or JPEG.

The LibWebP exploit is a 'zero-click' issue meaning that hackers could access data after users simply viewed a WebP image.

Is SuperNova affected by the LibWebP exploit?

In short, no.

SuperNova does not directly use the LibWebP component so it does not contain the exploit. 

The help system in SuperNova uses the Microsoft Edge WebView2 component which was affected up until Microsoft released a fix.  It is important to note that while the Microsoft Edge WebView2 component in SuperNova may have contained the exploit prior to the fix being delivered, since the component is only used to display local help files it is not possible for the exploit to be used to compromise a system.