PT-2026-43313

CVE-2026-48864

·

Published

2026-05-26

·

Updated

2026-10-14

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libsolv (affected versions not specified)
Description A heap buffer overflow occurs during the decompression of attacker-controlled compressed data within .solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file that, when processed by a vulnerable application, leads to out-of-bounds memory access. This may result in information disclosure, alteration of program execution, or a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:28236
ALSA-2026:36730
ALSA-2026:39315
CLSA-2026-1783417594
CLSA-2026-1783524329
RHSA-2026:21333
RHSA-2026:28236
RHSA-2026:36730
RHSA-2026:39315
RHSA-2026:48811
RHSA-2026:48813
RHSA-2026:48814
RHSA-2026:48815
RHSA-2026:48816
RHSA-2026:48817
RHSA-2026:48818
RHSA-2026:49775
RHSA-2026:50223
Found an issue in the description? Have something to add? Feel free to write us 👾