CVE-2026-9149
published 2026-05-21CVE-2026-9149: A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size…
PriorityP434medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.29%
20.9th percentile
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| opensuse | libsolv | <= 0.7.36 | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openshift_container_platform | — | — |
| redhat | satellite | — | — |
| redhat | update_infrastructure | — | — |
| satellite-capsule_el8 | libsolv | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
libsolv solv File repo_add_solv heap-based overflow (EUVD-2026-31201 / CNNVD-202605-4475)
vuldb·2026-05-22·CVSS 6.5
CVE-2026-9149 [MEDIUM] libsolv solv File repo_add_solv heap-based overflow (EUVD-2026-31201 / CNNVD-202605-4475)
A vulnerability described as critical has been identified in libsolv. This impacts the function repo_add_solv of the component solv File Handler. Executing a manipulation can lead to heap-based buffer overflow.
This vulnerability appears as CVE-2026-9149. The attack may be performed from remote. There is no available exploit.
A patch should be applied to remediate this issue.
GHSA
GHSA-9q56-xf64-q987: A flaw was found in libsolv
ghsa_unreviewed·2026-05-21
CVE-2026-9149 [MEDIUM] CWE-122 GHSA-9q56-xf64-q987: A flaw was found in libsolv
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).
Red Hat
libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
vendor_redhat·2026-05-20·CVSS 6.5
CVE-2026-9149 [MEDIUM] CWE-122 libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
MANUALLY_VERIFIED_REPORT
package: libsolv-0.7.33-2.el10
[Security] Heap Buffer Overflow in repo_add_solv via Negative maxsize
Summary: Heap buffer overflow in `repo_add_solv` when parsing attacker-controlled `.solv` files; large encoded `maxsize`/`allsize` header values can decode to negative signed `Id` values, leading to undersized heap allocation while a subsequent `fread` uses `DATA_READ_CHUNK` (8192) bytes.
Requirements to exploit: Ability to supply a crafted `.solv` file that a victim processes with libsolv (directly or via a consumer such as `dumpsolv` or an application that calls `repo_add_solv` on untrusted input).
Component affected: libsolv
Version affected: = TBD
CVSS: 6.5 (Medi
No detection rules found.
No public exploits indexed.
2026-05-21
Published