AIKIDO-2026-10928

TL;DR

The weezl LZW decoder can panic when processing malformed or corrupted streams, including cases where min_code_size is 12 and bit-flipped input drives out-of-bounds indexing in decode tables. Before the fix, that panic aborts the process and enables denial of service on untrusted GIF or TIFF LZW payloads. When yield_on_full_buffer is enabled, a small output buffer could also yield a false NoProgress status while data remained in internal buffers, so callers stopped early and silently dropped decoded bytes. Version 0.2.0 replaces panic-prone indexing with bounded table access, improves malformed-stream handling, and corrects progress reporting so buffered decode data is not lost.