CVE-2026-88366 Details
Description
NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently converts this NaN value to int without validating that it is finite and representable, resulting in undefined behavior and process termination, leading to denial of service.
A vulnerability has been identified in NanoSVG commit 239e102ec, where incorrect numeric conversion in the function nsvg__pathArcTo() allows for denial-of-service conditions. This issue arises when the parser encounters extreme arc radius values in an SVG document, causing intermediate calculations to produce a NaN delta angle. The function then improperly converts this NaN value to an integer without checking its validity, leading to undefined behavior and process termination.
Users are advised to update to the latest version of NanoSVG, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/memononen/nanosvg/issues/294 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| NanoSVG | 239e102ec2c691f2902e20ace2ed36ee4a35cfe6 |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 24, 2026 | New CVE Received | [email protected] |