high7.5
CVE-2026-110449
Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocatio…
Impact
Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.
Affected products
| Product | Affected versions |
|---|---|
| Nix | before 2.35.3 |
| Lix | before 2.95.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.