CVE-2026-88367
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 24, 2026
Vendor
unknown
Description
NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division yields infinity, which is converted to int without range validation, resulting in undefined behavior and process termination, leading to denial of service.