CVE-2026-35547

Katalog CVE

CVSS 8.1 · High EPSS 0,40%

Kerentanan Heap-based Buffer Overflow pada freebsd. Skor CVSS 3.1 8.1 (High) menurut CISA ADP.

Deskripsi (NVD)

When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bounds of a heap allocation. This can trigger a crash or system panic, and it may be possible for an unprivileged user to exploit the bug to elevate their privileges.

Rincian

Terbit di NVD

30 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-130: Improper Handling of Length Parameter Inconsistency

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.freebsd.org/advisories/FreeBSD-SA-26:17.libnv.asc advisory vendor