CVE-2026-123367 | ThorVG up to 1.1.1 JPEG decoder tvgJpgd.cpp heap-based overflow

A vulnerability has been found in ThorVG up to 1.1.1 and classified as problematic. This vulnerability affects unknown code of the file src/loaders/jpg/tvgJpgd.cpp of the component JPEG decoder. The manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-123367. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More