PT-2026-43313
CVE-2026-48864
·
Published
2026-05-26
·
Updated
2026-10-14
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
libsolv (affected versions not specified)
Description
A heap buffer overflow occurs during the decompression of attacker-controlled compressed data within
.solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file that, when processed by a vulnerable application, leads to out-of-bounds memory access. This may result in information disclosure, alteration of program execution, or a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾