Debian/thorvg: medium 4.3
Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run() allows any caller that passes untrusted SVG data to P
Action: Upgrade thorvg to 1.0.6+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.6+dfsg-1 | - |
Fixed versions
| 1.0.6+dfsg-1 |
Sources
published · modified · JSON