High
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Type: advisorySources: OSV
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-48864
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 13:23 UTC · Revision 1
Source evidence
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
core-osv · Original sourcePublished 26 May 2026, 16:16 UTC
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
osv:CVE-2026-48864
Complete source record
{
"id": "240dc3705416a292da9fec46aadcb2c9d3ed96908d32045f991c57ad172f1c8d",
"url": "https://osv.dev/vulnerability/CVE-2026-48864",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data",
"summary": "A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.",
"evidence": "osv:CVE-2026-48864",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-48864",
"aliases": [
"CVE-2026-48864"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/opensuse/libsolv",
"type": "GIT",
"events": [
{
"introduced": "1e377699be108ec82bb798ec9c223d45d84a733c"
},
{
"last_affected": "1e377699be108ec82bb798ec9c223d45d84a733c"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:opensuse:libsolv:0.7.36:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.7.36"
},
{
"last_affected": "0.7.36"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"0.7.36"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-48864.json"
}
}
],
"modified": "2026-10-28T02:30:28.912813016Z",
"provider": "osv",
"references": [
"https://access.redhat.com/downloads/content/package-browser/",
"https://catalog.redhat.com/software/containers/",
"https://access.redhat.com/errata/RHSA-2026:21333",
"https://access.redhat.com/errata/RHSA-2026:28236",
"https://access.redhat.com/errata/RHSA-2026:36730",
"https://access.redhat.com/errata/RHSA-2026:39315",
"https://access.redhat.com/errata/RHSA-2026:44481",
"https://access.redhat.com/errata/RHSA-2026:46836",
"https://access.redhat.com/errata/RHSA-2026:48811",
"https://access.redhat.com/errata/RHSA-2026:48813",
"https://access.redhat.com/errata/RHSA-2026:48814",
"https://access.redhat.com/errata/RHSA-2026:48815",
"https://access.redhat.com/errata/RHSA-2026:48816",
"https://access.redhat.com/errata/RHSA-2026:48817",
"https://access.redhat.com/errata/RHSA-2026:48818",
"https://access.redhat.com/errata/RHSA-2026:49775",
"https://access.redhat.com/errata/RHSA-2026:50223",
"https://access.redhat.com/errata/RHSA-2026:53371",
"https://access.redhat.com/errata/RHSA-2026:56786",
"https://access.redhat.com/errata/RHSA-2026:56853",
"https://access.redhat.com/errata/RHSA-2026:56911",
"https://access.redhat.com/errata/RHSA-2026:57402",
"https://access.redhat.com/errata/RHSA-2026:57483",
"https://access.redhat.com/errata/RHSA-2026:58981",
"https://access.redhat.com/errata/RHSA-2026:59831",
"https://access.redhat.com/errata/RHSA-2026:60019",
"https://access.redhat.com/errata/RHSA-2026:65839",
"https://access.redhat.com/errata/RHSA-2026:72394",
"https://access.redhat.com/errata/RHSA-2026:72395",
"https://access.redhat.com/errata/RHSA-2026:72399",
"https://access.redhat.com/errata/RHSA-2026:72470",
"https://access.redhat.com/errata/RHSA-2026:72475",
"https://access.redhat.com/errata/RHSA-2026:72476",
"https://access.redhat.com/errata/RHSA-2026:72502",
"https://access.redhat.com/errata/RHSA-2026:73909",
"https://access.redhat.com/errata/RHSA-2026:73959",
"https://access.redhat.com/errata/RHSA-2026:73960",
"https://access.redhat.com/errata/RHSA-2026:73961",
"https://access.redhat.com/errata/RHSA-2026:73962",
"https://access.redhat.com/errata/RHSA-2026:74458",
"https://access.redhat.com/errata/RHSA-2026:74459",
"https://access.redhat.com/errata/RHSA-2026:74460",
"https://access.redhat.com/errata/RHSA-2026:74461",
"https://access.redhat.com/errata/RHSA-2026:74462",
"https://access.redhat.com/errata/RHSA-2026:74463",
"https://access.redhat.com/errata/RHSA-2026:74674",
"https://access.redhat.com/errata/RHSA-2026:82304",
"https://access.redhat.com/errata/RHSA-2026:82322",
"https://access.redhat.com/errata/RHSA-2026:82336",
"https://access.redhat.com/errata/RHSA-2026:82347",
"https://access.redhat.com/errata/RHSA-2026:82354",
"https://access.redhat.com/errata/RHSA-2026:82372",
"https://access.redhat.com/errata/RHSA-2026:82857",
"https://access.redhat.com/errata/RHSA-2026:82888",
"https://access.redhat.com/security/cve/CVE-2026-48864",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48864.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48864",
"https://bugzilla.redhat.com/show_bug.cgi?id=2460425"
],
"provider_metadata": {
"cwe_ids": [
"CWE-787"
],
"cna_assigner": "redhat",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "0:0.7.33-5.el10_2"
},
{
"fixed": "0:0.7.29-8.el10_0.1"
},
{
"fixed": "0:0.6.34-4.el7_9.1"
},
{
"fixed": "0:0.7.20-7.el8_10"
},
{
"fixed": "0:0.7.16-3.el8_4.1"
},
{
"fixed": "0:0.7.16-3.el8_4.1"
},
{
"fixed": "0:0.7.20-1.el8_6.1"
},
{
"fixed": "0:0.7.20-1.el8_6.1"
},
{
"fixed": "0:0.7.20-4.el8_8.1"
},
{
"fixed": "0:0.7.20-4.el8_8.1"
},
{
"fixed": "0:0.7.24-6.el9_8"
},
{
"fixed": "0:0.7.24-6.el9_8"
},
{
"fixed": "0:0.7.22-4.el9_2.1"
},
{
"fixed": "0:0.7.24-2.el9_4.1"
},
{
"fixed": "0:0.7.24-3.el9_6.1"
},
{
"fixed": "412.86.202608241157-0"
},
{
"fixed": "413.92.202609080414-0"
},
{
"fixed": "414.92.202608172040-0"
},
{
"fixed": "415.92.202608180329-0"
},
{
"fixed": "416.94.202608150307-0"
},
{
"fixed": "417.94.202608250221-0"
},
{
"fixed": "418.94.202608142238-0"
},
{
"fixed": "4.19.9.6.202608182320-0"
},
{
"fixed": "1:0.7.20-7.el8sat"
},
{
"fixed": "1:0.7.20-7.el8sat"
},
{
"fixed": "1791371080"
},
{
"fixed": "1791371069"
},
{
"fixed": "1791788287"
},
{
"fixed": "1791378395"
},
{
"fixed": "1791970484"
},
{
"fixed": "1791459707"
},
{
"fixed": "1791459711"
},
{
"fixed": "1791459759"
},
{
"fixed": "1789029076"
},
{
"fixed": "1791966259"
},
{
"fixed": "1790223279"
},
{
"fixed": "1790223719"
},
{
"fixed": "1790272426"
},
{
"fixed": "1790589998"
},
{
"fixed": "1790589912"
},
{
"fixed": "1790589914"
},
{
"fixed": "1790589855"
},
{
"fixed": "1790598593"
},
{
"fixed": "1784821670"
},
{
"fixed": "1784821750"
},
{
"fixed": "0.7.38-2.hum1"
},
{
"fixed": "1786433656"
},
{
"fixed": "1790276886"
},
{
"fixed": "1790276884"
},
{
"fixed": "1790277045"
},
{
"fixed": "1790276889"
},
{
"fixed": "1790276974"
},
{
"fixed": "1790703497"
},
{
"fixed": "1790703506"
},
{
"fixed": "1790703590"
},
{
"fixed": "1790703568"
},
{
"fixed": "1790703586"
},
{
"fixed": "1790703494"
},
{
"fixed": "1790703542"
},
{
"fixed": "1784794818"
},
{
"fixed": "1784794778"
},
{
"fixed": "1784795112"
},
{
"fixed": "1784794289"
},
{
"fixed": "1784795076"
},
{
"fixed": "1787241211"
},
{
"fixed": "1787135742"
},
{
"fixed": "1787241260"
}
],
"source": "AFFECTED_FIELD",
"strategy": "InverseAffectedRanges"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48864.json"
}
},
"related_cves": [
{
"value": "CVE-2026-48864",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 495845,
"published_at": "2026-05-26T16:16:07.581+00:00"
}