When processing the header of an incoming message, libnv failed to properly validate the message size.

The lack of validation allows a malicious program to wri…

CVE-2026-35547 affects the libnv library in FreeBSD systems. When processing incoming message headers, libnv fails to properly validate message size. This validation failure allows malicious programs to write outside heap allocation bounds. The vulnerability can trigger system crashes or panics. Unprivileged users may be able to exploit this bug for privilege escalation. This represents a significant security risk for FreeBSD systems using the libnv library.