CVE-2026-35547 is a critical vulnerability in libnv where improper validation of the message size in incoming message headers allows out-of-bounds heap writes. This flaw can cause crashes or system panics and may enable unprivileged users to escalate privileges.