CVE-2026-82327

Name of the Vulnerable Software and Affected Versions libsolv (affected versions not specified)

Description An issue exists in libsolv, a dependency-resolution library utilized by RPM-based package managers like dnf and zypper for handling .solv repository cache files. The library fails to validate that directory-id values read from the compressed filelist data fall within the expected range during the rewriting of a .solv cache file. A corrupted or specially crafted .solv cache file, such as one resulting from an unclean system shutdown, can trigger an out-of-bounds memory write within the repo write() function when processed by tools such as dnf, yum, or zypper. This typically results in a denial of service via a tool crash, as the write operation uses a fixed value not controlled by an attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.