Skip to content
OpenAdvisories

Vendor

thorvg

3 known vulnerabilities.

Products

thorvg 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-45729 Public exploit

    ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input

    Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to Picture::load() to crash the process with a 6-byte payload. …

    thorvg thorvg thorvg thorvg Debian Ubuntu