Heap Buffer Overflow in libsolv Affects Multiple Products
CVE-2026-48864
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 26 May 2026
What is CVE-2026-48864?
A heap buffer overflow vulnerability has been identified in libsolv that occurs during the handling of compressed data in .solv files. The flaw arises from inadequate input validation, allowing attackers to craft malicious .solv files. When these files are processed by applications using vulnerable versions of libsolv, they can lead to out-of-bounds memory access. Consequently, this can expose sensitive information, alter the normal execution flow of applications, or cause denial of service.
Affected Version(s)
Cert Manager support for Red Hat OpenShift release 1.20 1790223279
Cert Manager support for Red Hat OpenShift release 1.20 1790223719
Cert Manager support for Red Hat OpenShift release 1.20 1790272426
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved