CVE-2026-45729

MediumCVSS 4.3

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Thor Vector Graphics (ThorVG) before version 1.0.5 has a null pointer dereference vulnerability in SvgLoader::run(). Any caller passing untrusted SVG data to Picture::load() can crash the process with a 6-byte payload.

Risk Assessment

The risk is remote denial of service (DoS) by providing a specially crafted SVG file.

Recommendation

Update ThorVG to version 1.0.5 or later.

Other vulnerabilities in ThorVG

CVE-2026-58496Medium
In Thor Vector Graphics (ThorVG) prior to 1.0.7, the SfntLoader::gen function in tvgSfntLoader.cpp reads data without first checking that the buffer contains at least four bytes, causing an out-of-bounds read. Loading an undersized font via memory APIs may crash the application or disclose adjacent heap memory.

Original NVD description (English source)

Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to Picture::load() to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS