Approved changes feed: RSS · Atom
cpe:2.3:a:thorvg:thorvg:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Thorvg (aba972e6-292d-5aa6-bf0c-22fe5fd97978) |
|---|---|
| Product | Thorvg (cfdd1a14-fd8c-5b6c-8631-7513c9df72a1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58496 |
vulnerable | 2026-11-03 10:15:20.384449 |
ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API
MEDIUM (4.3)
Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader's `SfntLoader::gen` function in `tvgSfntLoader.cpp` reads `data[0] through data[3]` to identify the font type without first checking that the input buffer contains at least four bytes. Loading an undersized font directly from memory through public APIs such as `tvg::Text::load` causes an out-of-bounds read. Loading through a file path using `mmap` can mask the read because of page alignment; the memory-loading API directly exposes it. Depending on memory layout, a malformed short font may crash the consuming application or disclose adjacent heap memory. This issue is fixed in version 1.0.7.
Published: 2026-10-27T22:18:34.301Z
Updated: 2026-11-02T19:46:26.453Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45729 |
vulnerable | 2026-06-08 08:05:11.849412 |
ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input
MEDIUM (4.3)
Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to Picture::load() to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5.
Published: 2026-06-01T17:18:36.254Z
Updated: 2026-06-02T15:31:39.686Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.