CVE-2026-48864

Discovered by AISLEPUBLISHEDCWE-787

Description

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.

CVSS Base Scores

CVSS v3.1(Primary)
7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionStatus
Red HatRed Hat Enterprise Linux 100:0.7.33-5.el10_2unaffected
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:0.7.29-8.el10_0.1unaffected
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:0.6.34-4.el7_9.1unaffected
Red HatRed Hat Enterprise Linux 80:0.7.20-7.el8_10unaffected
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:0.7.16-3.el8_4.1unaffected
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On0:0.7.16-3.el8_4.1unaffected
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:0.7.20-1.el8_6.1unaffected
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On0:0.7.20-1.el8_6.1unaffected
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:0.7.20-4.el8_8.1unaffected
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions0:0.7.20-4.el8_8.1unaffected
Red HatRed Hat Enterprise Linux 90:0.7.24-6.el9_8unaffected
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:0.7.22-4.el9_2.1unaffected
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:0.7.24-2.el9_4.1unaffected
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:0.7.24-3.el9_6.1unaffected
Red HatRed Hat OpenShift Container Platform 4.12412.86.202608241157-0unaffected
Red HatRed Hat OpenShift Container Platform 4.13413.92.202609080414-0unaffected
Red HatRed Hat OpenShift Container Platform 4.14414.92.202608172040-0unaffected
Red HatRed Hat OpenShift Container Platform 4.15415.92.202608180329-0unaffected
Red HatRed Hat OpenShift Container Platform 4.16416.94.202608150307-0unaffected
Red HatRed Hat OpenShift Container Platform 4.17417.94.202608250221-0unaffected
Red HatRed Hat OpenShift Container Platform 4.18418.94.202608142238-0unaffected
Red HatRed Hat OpenShift Container Platform 4.194.19.9.6.202608182320-0unaffected
Red HatRed Hat Satellite 6.16 for RHEL 81:0.7.20-7.el8satunaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790223279unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790223719unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790272426unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790589998unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790589912unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790589914unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790589855unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790598593unaffected
Red HatRed Hat Discovery 21784821670unaffected
Red HatRed Hat Discovery 21784821750unaffected
Red HatRed Hat Hardened Images0.7.38-2.hum1unaffected
Red HatRed Hat Insights proxy 1.51786433656unaffected
Red HatRed Hat OpenShift AI 3.01790276886unaffected
Red HatRed Hat OpenShift AI 3.01790276884unaffected
Red HatRed Hat OpenShift AI 3.01790277045unaffected
Red HatRed Hat OpenShift AI 3.01790276889unaffected
Red HatRed Hat OpenShift AI 3.01790276974unaffected
Red HatRed Hat OpenShift AI 3.21790703497unaffected
Red HatRed Hat OpenShift AI 3.21790703506unaffected
Red HatRed Hat OpenShift AI 3.21790703590unaffected
Red HatRed Hat OpenShift AI 3.21790703568unaffected
Red HatRed Hat OpenShift AI 3.21790703586unaffected
Red HatRed Hat OpenShift AI 3.21790703494unaffected
Red HatRed Hat OpenShift AI 3.41790703542unaffected
Red HatRed Hat Update Infrastructure 51784794818unaffected
Red HatRed Hat Update Infrastructure 51784794778unaffected
Red HatRed Hat Update Infrastructure 51784795112unaffected
Red HatRed Hat Update Infrastructure 51784794289unaffected
Red HatRed Hat Update Infrastructure 51784795076unaffected
Red HatRed Hat Update Infrastructure 51787241211unaffected
Red HatRed Hat Update Infrastructure 51787135742unaffected
Red HatRed Hat Update Infrastructure 51787241260unaffected
Red HatRed Hat OpenShift Container Platform 4——
Red HatRed Hat Update Infrastructure 4 for Cloud Providers——

Credits

  • This issue was discovered by Found by AISLE in partnership with Red Hat.

References