Lucene search
+L

7 matches found

osv_debian
osv_debian
•added 2026/11/09 6:17 p.m.•9 views

DEBIAN-CVE-2026-123367

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...

7.4CVSS6.2AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2026/11/09 6:17 p.m.•7 views

CVE-2026-123367

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...

7.4CVSS0.00256EPSS
SaveExploits0References4
CVE
CVE
•added 2026/11/09 5:21 p.m.•14 views

CVE-2026-123367

The Thor Vector Graphics (ThorVG) engine contains a heap buffer overflow (CWE-787) in its bundled jpgd JPEG decoder prior to version 1.1.2 . The root cause is that the decoder accepts duplicate component selectors in an SOS scan header, increasing m_blocks_per_mcu without verifying the buffer siz...

7.4CVSS6.2AI score0.00256EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/11/09 5:21 p.m.•6 views

CVE-2026-123367 ThorVG: Heap buffer overflow (OOB write) in bundled jpgd JPEG decoder

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...

7.4CVSS6.3AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/11/09 5:21 p.m.•17 views

CVE-2026-123367 ThorVG: Heap buffer overflow (OOB write) in bundled jpgd JPEG decoder

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...

7.4CVSS0.00256EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/09 12:00 a.m.•5 views

CVE-2026-123367: thorvg: Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...

7.4CVSS6.2AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/09 12:00 a.m.•4 views

PT-2026-140456

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase m blocks per mcu without checking the buffers sized from the frame components. A...

7.4CVSS6.2AI score0.00256EPSS
SaveExploits0References5
Rows per page
Query Builder