diff --git a/flake.nix b/flake.nix
index c62df34..ea8a45d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -87,6 +87,27 @@
           '';
           docs = pkgs.callPackage ./nix/docs.nix { inherit self; };
           default = nova-shell;
+
+          # Reproducer for the qtbase wayland screen UAF, built twice:
+          # patched (should survive) and unpatched (should crash).
+          screen-uaf-reproducer-patched = pkgs.stdenv.mkDerivation {
+            pname = "screen-uaf-reproducer-patched";
+            version = "0";
+            src = ./test/screen-uaf-reproducer;
+            nativeBuildInputs = [ pkgs.cmake pkgs.qt6.wrapQtAppsHook ];
+            buildInputs = [ pkgs.qt6.qtbase ];
+          };
+          screen-uaf-reproducer-unpatched =
+            let
+              rawPkgs = nixpkgs.legacyPackages.${pkgs.stdenv.hostPlatform.system};
+            in
+            rawPkgs.stdenv.mkDerivation {
+              pname = "screen-uaf-reproducer-unpatched";
+              version = "0";
+              src = ./test/screen-uaf-reproducer;
+              nativeBuildInputs = [ rawPkgs.cmake rawPkgs.qt6.wrapQtAppsHook ];
+              buildInputs = [ rawPkgs.qt6.qtbase ];
+            };
         }
       );