CVE-2026-45729

MEDIUM

Thor Vector Graphics < 1.0.5 - Denial of Service via Null Pointer Dereference in SvgLoader

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-45729. PoCs published by yeahhbean.

AI-analyzed exploit summary Detailed technical analysis of CVE-2026-45729, a NULL pointer dereference in ThorVG's SVG parser triggered by a 6-byte malformed SVG input. The writeup includes root cause analysis, fuzzing setup, patch diff, and exploitability context for both standard Linux (DoS) and MMU-less embedded targets.

Description

Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to Picture::load() to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5.

Exploits (1)

github WRITEUP
by yeahhbean · poc
https://github.com/yeahhbean/CVE-2026-45729

Detailed technical analysis of CVE-2026-45729, a NULL pointer dereference in ThorVG's SVG parser triggered by a 6-byte malformed SVG input. The writeup includes root cause analysis, fuzzing setup, patch diff, and exploitability context for both standard Linux (DoS) and MMU-less embedded targets.

Classification
Writeup 99%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: ThorVG <1.0.5
No auth needed
Prerequisites: Ability to supply malformed SVG input to a ThorVG-powered application (e.g., via file upload, network request, or local file)
mistral-large-3 · analyzed Jul 22, 2026 Full analysis →

References (4)

Core 4

Scores

CVSS v3 4.3
EPSS 0.0024
EPSS Percentile 14.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (1)
thorvg/thorvg < 1.0.5
Published Jun 01, 2026
Tracked Since Jun 02, 2026