A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libsolv-toolsUpgrade python3-solvUpgrade libsolv-develUpgrade libsolv | Jul 9, 2026 | Jul 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libsolv-develUpgrade libsolv-toolsUpgrade libsolv-debuginfoUpgrade libsolv-demoUpgrade python2-solvUpgrade libsolv | Jun 9, 2026 | Jun 9, 2026 |
| Amazon_linux_2023 | — | Upgrade perl-solvUpgrade ruby-solvUpgrade libsolv-debuginfoUpgrade libsolv-demoUpgrade python3-solvUpgrade libsolv-develUpgrade perl-solv-debuginfoUpgrade ruby-solv-debuginfoUpgrade libsolvUpgrade python3-solv-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debugsourceUpgrade libsolv-demo-debuginfoUpgrade libsolv-tools-debuginfo | Jun 9, 2026 | May 26, 2026 |
| Oracle_linux | — | Upgrade libsolv-develUpgrade python3-solvUpgrade libsolvUpgrade libsolv-toolsUpgrade libsolv-tools-base | Oct 22, 2026 | May 26, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 27, 2026 | May 26, 2026 |
| Redhat_linux | — | Upgrade libsolvUpgrade python2-solvUpgrade ruby-solv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-tools-baseUpgrade libsolv-toolsUpgrade perl-solv-debuginfoUpgrade python3-solvUpgrade libsolv-demoUpgrade libsolv-debuginfoUpgrade libsolv-debugsourceUpgrade libsolv-demo-debuginfoUpgrade python3-solv-debuginfoUpgrade libsolv-tools-base-debuginfoUpgrade libsolv-devel | Jun 25, 2026 | May 26, 2026 |
| Rocky_linux | — | Upgrade python3-solv-debuginfoUpgrade python3-solvUpgrade libsolvUpgrade libsolv-develUpgrade libsolv-debuginfoUpgrade libsolv-tools-debuginfoUpgrade libsolv-toolsUpgrade libsolv-debugsource | Jun 29, 2026 | Jun 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 14, 2026 | May 26, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub