thorvg vulnerabilities (Debian)

2 vulnerabilities.

• thorvg Debian ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API CVE-2026-58496 4.3 MediumOctober 27, 2026
• thorvg Debian ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input CVE-2026-45729 Public exploitFix available 4.3 MediumJune 1, 2026