CVE-2026-58496

A flaw was found in ThorVG. The vector graphics engine's font loader does not verify that an input buffer contains the minimum required data before attempting to inspect font headers. An attacker could exploit this flaw by enticing an application to load a specially crafted, undersized font...