Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.

Timeline

Detection, updates, and resolution for this record.

1. Oct 14, 2026 · NIST NVD

   Detected

   Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.

2. Oct 14, 2026 · NIST NVD

   Updated

   Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.

Sources

• CVE.orgCVE-2026-110449

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-110449

  30-day exploitation probability 0.2%

  first.org
• NIST NVDCVE-2026-110449

  Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.

  nvd.nist.gov

References

• Reference · discourse.nixos.org