A crafted SVG file can cause a denial of service. An off-by-one boundary check (> instead of >=) that allows bypass the guard and reach an undefined (size_t) cast.
{
"nvd_published_at": "2026-02-24T03:16:00Z",
"severity": "HIGH",
"github_reviewed_at": "2026-02-24T15:45:35Z",
"cwe_ids": [
"CWE-190",
"CWE-681"
],
"github_reviewed": true
}