CVE-2026-35547
HighSummary
When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bounds of a heap allocation, which can trigger a crash or system panic.
Risk Assessment
The lack of proper validation may allow an unprivileged user to exploit the bug to elevate their privileges, posing a serious security threat to the system.
Recommendation
It is recommended to update libnv to the latest version that includes fixes for message size validation and to monitor the system for unauthorized privilege escalation attempts.
Other vulnerabilities in libnv
Original NVD description (English source)
When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bounds of a heap allocation. This can trigger a crash or system panic, and it may be possible for an unprivileged user to exploit the bug to elevate their privileges.