Out-of-Bounds Read in Thor Vector Graphics Engine's TTF Font Loader

CVE-2026-58496

What is CVE-2026-58496?

A vulnerability exists in the Thor Vector Graphics (ThorVG) engine related to its TTF font loader. Specifically, the SfntLoader::gen function does not verify that the input buffer contains a sufficient number of bytes before accessing its data. This flaw can lead to out-of-bounds reads when a smaller-than-expected font is loaded into memory using public APIs, potentially causing application crashes or exposing sensitive adjacent memory. This issue has been addressed in version 1.0.7, where improved checks ensure that the font loader operates securely.

References