CVE-2026-88367

NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__curveDivs() during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division yields infinity, which is converted to int without range validation, resulting in undefined behavior and process termination, leading to denial of service.

• CWE-681

• https://github.com/memononen/nanosvg/issues/293
• https://github.com/memononen/nanosvg/issues/293

Published

Sep 24, 2026

Last Modified

Sep 25, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8836A vulnerability was found in lwIP up to 2.2.1. Affected is t…9.8
• CVE-2026-88360libvips 8.19.0 contains a memory access vulnerability when p…
• CVE-2026-88361SumatraPDF 3.6.1 contains an integer overflow vulnerability …7.5
• CVE-2026-88362MuJS e892c9fdb contains an incorrect numeric conversion vuln…7.5
• CVE-2026-88365minimp3 commit ea99364f contains an integer overflow vulnera…
• CVE-2026-88366NanoSVG commit 239e102ec contains an incorrect numeric conve…
• CVE-2026-88368NanoSVG commit 239e102ec contains an incorrect numeric conve…7.5
• CVE-2026-88369zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow …7.3
• CVE-2026-8837The WP Iframe Geo Style for Amazon affiliates plugin for Wor…6.4
• CVE-2026-88370libconfini 1.16.4 contains a heap out-of-bounds write condit…5.3
• CVE-2026-88371ZBar commit 2ea2ca58 contains an undefined-behavior vulnerab…
• CVE-2026-88372libsndfile 1.2.2 contains an integer overflow vulnerability …7.5