Heap Allocation Vulnerability in libnv Affects FreeBSD Software

CVE-2026-35547

What is CVE-2026-35547?

The libnv library's failure to validate the size of incoming message headers can lead to a harmful heap overflow vulnerability. This flaw allows malicious entities to write outside the defined memory bounds, potentially causing system crashes or panic. Furthermore, in some cases, an unprivileged user could exploit this flaw to escalate their privileges, posing a significant security risk to systems using affected versions of FreeBSD.

References