CVE-2026-58496

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...

CVE-2026-58496

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...

CVE-2026-58496 ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...

CVE-2026-58496 ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...

CVE-2026-58496

Thor Vector Graphics (ThorVG ) contains an out-of-bounds read vulnerability in the SFNT/TTF font loader prior to version 1.0.7 . The root cause is located in the SfntLoader::gen function within tvgSfntLoader.cpp, which accesses data[0] through data[3] without verifying that the input buffer conta...