Skip to content
OpenAdvisories

Package · Debian

thorvg

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-123367

    ThorVG: Heap buffer overflow (OOB write) in bundled jpgd JPEG decoder

    Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase m_blocks_per_mcu without checking the buf…

    thorvg thorvg thorvg Debian