Libsolv vulnerabilities

2 known vulnerabilities in Libsolv from openSUSE. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  libsolv: Stack-based Buffer Overflow

  CVE-2026-48863Jul 16, 2026openSUSE

  A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature w

• 7.8 High severity

  Red Hat Enterprise Linux 10: Out-of-bounds Write

  CVE-2026-48864May 26, 2026Red Hat

  A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when proce