EUVD-2026-111405

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...

CVE-2026-58496

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the "SFNT/TTF" font loader's "SfntLoader::gen" function in "tvgSfntLoader.cpp" reads "data0 through data3" to identify the font type without first checking that the input buffer contains at least four bytes...