{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3athorvgthor_vector_graphics/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:thorvg:thor_vector_graphics:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.4,"id":"CVE-2026-123367"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Thor Vector Graphics (\u003c 1.1.2)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["ThorVG"],"content_html":"\u003cp\u003eIn Thor Vector Graphics (ThorVG) prior to version 1.1.2, the bundled jpgd JPEG decoder incorrectly handles duplicate component selectors in the SOS scan header. This error causes an increase in \u003ccode\u003em_blocks_per_mcu\u003c/code\u003e without verifying buffers sized for frame components. A crafted grayscale JPEG can leverage this to trigger memory writes beyond heap buffers. This vulnerability is reachable through direct JPEG decoding and JPEG images embedded in Lottie content.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe confirmed impact is memory corruption followed by a process crash.\u003c/p\u003e\n\u003ch2 id=\"remediation\"\u003eRemediation\u003c/h2\u003e\n\u003cp\u003eThis issue is fixed in version 1.1.2.\u003c/p\u003e\n","date_modified":"2026-11-09T21:59:15Z","date_published":"2026-11-09T21:59:15Z","id":"https://feed.craftedsignal.io/briefs/2026-11-thorvg-heap-overflow/","summary":"The Thor Vector Graphics (ThorVG) engine prior to 1.1.2 contains a heap buffer overflow vulnerability in its bundled jpgd JPEG decoder.","title":"Thor Vector Graphics: Heap-based buffer overflow in jpgd JPEG decoder (CVE-2026-123367)","url":"https://feed.craftedsignal.io/briefs/2026-11-thorvg-heap-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:thorvg:thor_vector_graphics:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}