> DESCRIPTION
When processing the header of an incoming message, libnv failed to properly validate the message size.
The lack of validation allows a malicious program to write outside the bounds of a heap allocation. This can trigger a crash or system panic, and it may be possible for an unprivileged user to exploit the bug to elevate their privileges.
> CWE DETAILED DESCRIPTIONS
CWE-122: Heap-based Buffer Overflow - The product writes past the end of a buffer that was allocated on the heap. | CWE-130: Improper Handling of Length Parameter Inconsistency - The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.