CVE-2026-58496

Name of the Vulnerable Software and Affected Versions Thor Vector Graphics (ThorVG) versions prior to 1.0.7

Description The SFNT/TTF font loader's SfntLoader::gen() function in tvgSfntLoader.cpp reads the first four bytes of the input buffer to identify the font type without verifying that the buffer contains at least four bytes. When an undersized font is loaded directly from memory via public APIs like tvg::Text::load, it triggers an out-of-bounds read. This can lead to application crashes or the disclosure of adjacent heap memory, depending on the memory layout.

Recommendations Update Thor Vector Graphics (ThorVG) to version 1.0.7.