ThorVG - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/thorvg/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 21:59:15 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgThor Vector Graphics: Heap-based buffer overflow in jpgd JPEG decoder (CVE-2026-123367)https://feed.craftedsignal.io/briefs/2026-11-thorvg-heap-overflow/Mon, 09 Nov 2026 21:59:15 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-thorvg-heap-overflow/The Thor Vector Graphics (ThorVG) engine prior to 1.1.2 contains a heap buffer overflow vulnerability in its bundled jpgd JPEG decoder.In Thor Vector Graphics (ThorVG) prior to version 1.1.2, the bundled jpgd JPEG decoder incorrectly handles duplicate component selectors in the SOS scan header. This error causes an increase in m_blocks_per_mcu without verifying buffers sized for frame components. A crafted grayscale JPEG can leverage this to trigger memory writes beyond heap buffers. This vulnerability is reachable through direct JPEG decoding and JPEG images embedded in Lottie content.

Impact

The confirmed impact is memory corruption followed by a process crash.

Remediation

This issue is fixed in version 1.1.2.

]]>lowadvisory