Thorvg

3 CVEs in 1 Thorvg product, including Thorvg. Newest: CVE-2026-123367 (2026-11-09). Severity, EPSS and public exploits for each.

Thorvg products with known CVEs

ProductCVEs
Thorvg3
Thorvg CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-123367High7.42026-11-09Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors…
CVE-2026-58496Medium4.32026-10-27Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader's `SfntLoader::gen` function in `tvgSfnt…
CVE-2026-45729Medium4.32026-06-01Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any c…