Heap Buffer Overflow in RPM Package Manager Affecting Red Hat Products
CVE-2026-44605

5.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Hardened Images
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Vendor
CVE Published:
5 August 2026

What is CVE-2026-44605?

A significant security issue has been identified in the RPM Package Manager that can lead to a heap buffer overflow when processing specially crafted NDB database files. This flaw occurs due to improper handling of specific calculations during file parsing, resulting in incorrect memory allocation. Attackers could exploit this vulnerability locally to trigger a denial of service, potentially rendering the system unavailable and impacting overall operational integrity.

Affected Version(s)

Red Hat Hardened Images 6.0.1-6.2.hum1

References

https://access.redhat.com/errata/RHSA-2026:33507
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-44605
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2482481
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.