CVE-2026-48864 Details

A heap buffer overflow vulnerability has been identified in libsolv, affecting several Red Hat products including Red Hat Enterprise Linux 7, 8, 9, and 10, as well as Red Hat OpenShift Container Platform 4, Red Hat Satellite 6, and Red Hat Update Infrastructure 4 for Cloud Providers. The vulnerability arises from the decompression of attacker-controlled data in .solv files, which is performed without adequate input validation. This flaw can lead to out-of-bounds memory access, potentially causing information disclosure, unauthorized alteration of program execution, or a denial-of-service condition.