← Back

CVE-2026-48864

nvd nist
Published: May 26, 2026Modified: Jul 23, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: secalert@redhat.com (Secondary)

Description

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.

Affected (9)

1 product
Libsolv
5 products
Enterprise Linux
Hardened Images
Openshift Container Platform
Satellite
Update Infrastructure
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Version 0.7.36
Redhat
Version 10.0
Version 7.0
Version 8.0
Version 9.0
All versions
Version 4.0
Version 6.0
Version 4

References (7)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.