CoreCVE
Back

HIGH

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

Published May 26, 2026

Description

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.

Affected products

Remediation

Vendor solution

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Red Hat statement

This heap buffer overflow in libsolv's page decompression logic can lead to out-of-bounds reads and writes when processing specially crafted `.solv` files. Exploitation requires a victim application to ingest malicious repository metadata, limiting the attack vector to scenarios involving user interaction or untrusted content sources. Given the user interaction needed, Red Hat Product Security has rated this vulnerability as having a impact of Moderate.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Metrics

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (48)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published May 26, 2026
Updated Oct 2, 2026
Reserved May 25, 2026
Link CVE-2026-48864
CISA Vulnrichment
Updated May 28, 2026
NVD
Status Modified
Modified Oct 2, 2026
Link CVE-2026-48864
Red Hat
Severity Moderate
Public date May 26, 2026
Links CVE-2026-48864 - Bugzilla