Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

libsolv could execute malicious code via crafted .solv files

CVE-2026-48864 · published 5 months ago
Summary

The libsolv library used in several Red Hat Enterprise Linux versions and Debian can be tricked into running unsafe code when it decompresses a specially crafted .solv file. This could let an attacker view or change data, or cause the program to crash. Apply the latest security updates from your Linux distribution as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian libsolv All versions
Debian:12 debian libsolv All versions
Debian:13 debian libsolv All versions
Debian:14 debian libsolv All versions
– red hat red hat enterprise linux 10 All versions
– red hat red hat enterprise linux 8 All versions
– red hat red hat hardened images All versions
– red hat red hat enterprise linux 7 All versions
– red hat red hat enterprise linux 9 All versions
– red hat red hat openshift container platform 4 All versions
– red hat red hat satellite 6 All versions
– red hat red hat update infrastructure 4 for cloud providers All versions
– opensuse libsolv 0.7.36
cpe:2.3:a:opensuse:libsolv:0.7.36:*:*:*:*:*:*:*
– redhat hardened_images All versions
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
– redhat openshift_container_platform 4.0
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
– redhat satellite 6.0
cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*
– redhat update_infrastructure 4
cpe:2.3:a:redhat:update_infrastructure:4:*:*:*:*:*:*:*
– redhat enterprise_linux 7.0
8.0
9.0
10.0
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
– red hat red hat enterprise linux 8.6 advanced mission critical update support All versions
– red hat red hat enterprise linux 8.6 extended update support long-life add-on All versions
– red hat red hat enterprise linux 9.2 update services for sap solutions All versions
– red hat red hat discovery 2 All versions
– red hat red hat update infrastructure 5 All versions
– red hat red hat enterprise linux 10.0 extended update support All versions
– red hat red hat enterprise linux 7 extended lifecycle support All versions
– red hat red hat enterprise linux 8.4 advanced mission critical update support All versions
– red hat red hat enterprise linux 8.4 extended update support long-life add-on All versions
– red hat red hat enterprise linux 8.8 telecommunications update service All versions
– red hat red hat enterprise linux 8.8 update services for sap solutions All versions
– red hat red hat enterprise linux 9.4 update services for sap solutions All versions
– red hat red hat enterprise linux 9.6 extended update support All versions
– red hat red hat satellite 6.16 for rhel 8 All versions
– red hat red hat insights proxy 1.5 All versions
– red hat red hat openshift container platform 4.12 All versions
– red hat red hat openshift container platform 4.17 All versions
– red hat red hat openshift container platform 4.14 All versions
– red hat red hat openshift container platform 4.15 All versions
– red hat red hat openshift container platform 4.16 All versions
– red hat red hat openshift container platform 4.18 All versions
– red hat red hat openshift container platform 4.19 All versions
– red hat red hat openshift container platform 4.13 All versions
– red hat cert manager support for red hat openshift release 1.20 All versions
– red hat red hat openshift ai 3.0 All versions
– red hat red hat openshift ai 3.2 All versions
– red hat red hat openshift ai 3.4 All versions
– red hat cert manager support for red hat openshift release 1.17 All versions
– red hat cert manager support for red hat openshift release 1.18 All versions
Ubuntu:Pro:16.04:LTS canonical libsolv All versions
Original advisory text
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published26 May 2026
Updated4 Nov 2026
First seen26 May 2026
Sources
DEBIAN-CVE-2026-48864 · OSV
CVE-2026-48864 · NVD
CVE-2026-48864 · MITRE
CVE-2026-48864 · OSV
UBUNTU-CVE-2026-48864 · OSV
Track software like this
Free during beta