Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
9 versions affected across 6 products
| Date | Total | Labels |
|---|
| 2026-05-29 | 1 | Disclosure1 |
| 2026-06-19 | 1 | General1 |
CVE-2026-48864: libsolv Heap Buffer Overflow - What It Means for Your Business and How to Respond https://hubs.li/Q04m12MN0
Post summary
The article announces a heap buffer overflow in libsolv and advises readers on general response steps, but provides no PoC, exploit code, patch details, or evidence of active exploitation.
🟠 libsolv, Heap Buffer Overflow, #CVE-2026-48864 (Moderate) -DC-May2026-24 https://dailycve.com/libsolv-heap-buffer-overflow-cve-2026-48864-moderate-dc-may2026-24/
Post summary
A new heap buffer overflow vulnerability (CVE-2026-48864) affecting libsolv is disclosed and rated as moderate severity.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opensuse | libsolv | 0.7.36 | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |
| App | redhat | hardened_images | - | - | - |
| App | redhat | openshift_container_platform | 4.0 | - | - |
| App | redhat | satellite | 6.0 | - | - |
| App | redhat | update_infrastructure | 4 | - | - |