CVE-2026-35547-nvd.nist.gov-Undergoing Analysis

When processing the header of an incoming message, libnv failed to properly validate the message size.

The lack of validation allows a malicious program to wri…

Published:

29 April 2026 at 22:00:00

Alert date:

30 April 2026 at 17:05:34

Source:

nvd.nist.gov

Operating Systems

CVE-2026-35547 affects the libnv library in FreeBSD systems. When processing incoming message headers, libnv fails to properly validate message size. This validation failure allows malicious programs to write outside heap allocation bounds. The vulnerability can trigger system crashes or panics. Unprivileged users may be able to exploit this bug for privilege escalation. This represents a significant security risk for FreeBSD systems using the libnv library.

Technical details

Mitigation steps:

Affected products:

FreeBSD
libnv