Skip to content
OpenAdvisories

Vendor

thorvg

3 known vulnerabilities.

Products

thorvg 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-58496

    ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API

    Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader's `SfntLoader::gen` function in `tvgSfntLoader.cpp` reads `data[0] through data[3]` to identify the font type without first checking that th…

    thorvg thorvg thorvg thorvg Debian Ubuntu
  • Medium 4.3
    CVE-2026-45729 Public exploit

    ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input

    Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to Picture::load() to crash the process with a 6-byte payload. …

    thorvg thorvg thorvg thorvg Debian Ubuntu