Thorvg vulnerabilities
We track 1 vulnerability in Thorvg products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Thorvg vulnerabilities
- 7.4 High severity
thorvg: Out-of-bounds Write
Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase m_blocks_per_mcu without checking the buff