CVE-2026-35547: Heap overflow in libnv
When processing the header of an incoming message, libnv failed to properly validate the message size.
The lack of validation allows a malicious program to write outside the bounds of a heap allocation. This can trigger a crash or system panic, and it may be possible for an unprivileged user to exploit the bug to elevate their privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35547?
CVE-2026-35547 has a high severity rating due to its potential to cause system crashes or panics.
How do I fix CVE-2026-35547?
To fix CVE-2026-35547, upgrade the affected libnv library to a patched version as provided in recent software updates.
What systems are affected by CVE-2026-35547?
CVE-2026-35547 affects FreeBSD versions 13.5, 14.3, 14.4, and 15.0.
What vulnerabilities does CVE-2026-35547 exploit?
CVE-2026-35547 exploits a heap overflow vulnerability due to improper message size validation in libnv.
What are the risks associated with CVE-2026-35547?
The risks associated with CVE-2026-35547 include potential crashes, system instability, and possible exploitation by malicious programs.