CVE-2026-48864 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Heap buffer overflow in libsolv allows attackers to execute code or cause denial of service via malicious .solv files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-48864?
CVE-2026-48864 is a high-severity memory corruption vulnerability in Redhat Enterprise Linux, published on 26 May 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.
Weakness: CWE-787
Which versions are affected by CVE-2026-48864?
It affects 6 products.
Linux distribution packages (40)
libsolv AlmaLinux:8 | All versions | 0.7.20-7.el8_10 |
libsolv-devel AlmaLinux:8 | All versions | 0.7.20-7.el8_10 |
libsolv-tools AlmaLinux:8 | All versions | 0.7.20-7.el8_10 |
python3-solv AlmaLinux:8 | All versions | 0.7.20-7.el8_10 |
libsolv AlmaLinux:9 | All versions | 0.7.24-6.el9_8 |
libsolv-devel AlmaLinux:9 | All versions | 0.7.24-6.el9_8 |
libsolv-tools AlmaLinux:9 | All versions | 0.7.24-6.el9_8 |
python3-solv AlmaLinux:9 | All versions | 0.7.24-6.el9_8 |
libsolv Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
libsolv-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
libsolv-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
libsolv-demo-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
libsolv-tools-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
perl-solv-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
python3-solv Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
python3-solv-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
ruby-solv-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:0.7.20-7.el8_10 |
libsolv-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
libsolv-debugsource Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
libsolv-demo-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
libsolv-devel Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
libsolv-tools Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
libsolv-tools-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
perl-solv-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
python3-solv-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
ruby-solv-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.7.20-7.el8_10 |
libsolv-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
libsolv-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
libsolv-demo-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
libsolv-tools-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
perl-solv-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
python3-solv Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
python3-solv-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
ruby-solv-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:0.7.24-6.el9_8 |
libsolv Red Hat:enterprise_linux:9::baseos | All versions | 0:0.7.24-6.el9_8 |
libsolv-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.7.24-6.el9_8 |
libsolv-debugsource Red Hat:enterprise_linux:9::baseos | All versions | 0:0.7.24-6.el9_8 |
libsolv-demo-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.7.24-6.el9_8 |
libsolv-tools-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.7.24-6.el9_8 |
perl-solv-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:0.7.24-6.el9_8 |
Products include Opensuse Libsolv, Redhat Enterprise Linux, Redhat Hardened Images, Redhat Openshift Container Platform, Redhat Satellite, Redhat Update Infrastructure.
How do I fix CVE-2026-48864?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-48864 being exploited?
There is no known exploitation of CVE-2026-48864 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as ALSA-2026:36730, ALSA-2026:39315, CLSA-2026-1783417594, CLSA-2026-1783524329, DEBIAN-CVE-2026-48864, GHSA-2927-mfhv-37vh and 12 more.