Beveiligingsadvies

CVE-2026-35547

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-30 08:08:13
Laatst bijgewerkt 2026-05-01 15:26:28
Toegewezen door freebsd
CVSS-score 8.1
Status PUBLISHED

Beschrijving

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bounds of a heap allocation. This can trigger a crash or system panic, and it may be possible for an unprivileged user to exploit the bug to elevate their privileges.