CVE-2026-88366

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently...

CVE-2026-88366

The NanoSVG library (commit 239e102ec ) contains an incorrect numeric conversion vulnerability in the nsvg__pathArcTo() function during SVG arc command parsing. When processing a specially crafted SVG document with extreme arc radius values, intermediate calculations can produce a NaN delta angle...

EUVD-2026-86265

NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvgpathArcTo when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN delta angle. The function subsequently...