CVE-2026-45729CWE-476

ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input

Medium · published June 1, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to Picture::load() to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-06-01T17:18Z
EPSS history
Timeline
  • 01 JUN 17:18Z
    ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input
    cvelistv5