CVE record · CVE-2026-48864

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

CVSS 7.8 HighEPSS 0.0023 · 13th percentile

Published by the CVE Program (CNA: redhat) at 26 May 2026, 16:16 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 10 Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.33-5.el10_2 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.29-8.el10_0.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.6.34-4.el7_9.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8 Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.20-7.el8_10 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.16-3.el8_4.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.16-3.el8_4.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.20-1.el8_6.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.20-1.el8_6.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.20-4.el8_8.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.20-4.el8_8.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9 Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.24-6.el9_8 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9 Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.24-6.el9_8 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.22-4.el9_2.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.24-2.el9_4.1 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support Package name: libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 0:0.7.24-3.el9_6.1 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.12 Package name: openshift/ose-rhel-coreos-8 https://access.redhat.com/downloads/content/package-browser/	unaffected 412.86.202608241157-0 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.13 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	unaffected 413.92.202609080414-0 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.14 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	unaffected 414.92.202608172040-0 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.15 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	unaffected 415.92.202608180329-0 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.16 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	unaffected 416.94.202608150307-0 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.17 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	unaffected 417.94.202608250221-0 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.18 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	unaffected 418.94.202608142238-0 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift Container Platform 4.19 Package name: openshift/ose-rhel-coreos-9 https://access.redhat.com/downloads/content/package-browser/	unaffected 4.19.9.6.202608182320-0 to before * rpm Other versions: affected
Red Hat	Red Hat Satellite 6.16 for RHEL 8 Package name: satellite-capsule:el8/libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 1:0.7.20-7.el8sat to before * rpm Other versions: affected
Red Hat	Red Hat Satellite 6.16 for RHEL 8 Package name: satellite-capsule:el8/libsolv https://access.redhat.com/downloads/content/package-browser/	unaffected 1:0.7.20-7.el8sat to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17 Package name: cert-manager/jetstack-cert-manager-acmesolver-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791371080 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17 Package name: cert-manager/jetstack-cert-manager-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791371069 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17 Package name: cert-manager/cert-manager-operator-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791788287 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17 Package name: cert-manager/cert-manager-istio-csr-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791378395 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.17 Package name: cert-manager/cert-manager-operator-bundle https://catalog.redhat.com/software/containers/	unaffected 1791970484 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18 Package name: cert-manager/jetstack-cert-manager-acmesolver-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791459707 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18 Package name: cert-manager/jetstack-cert-manager-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791459711 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18 Package name: cert-manager/cert-manager-istio-csr-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791459759 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18 Package name: cert-manager/cert-manager-operator-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789029076 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.18 Package name: cert-manager/cert-manager-operator-bundle https://catalog.redhat.com/software/containers/	unaffected 1791966259 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20 Package name: cert-manager/jetstack-cert-manager-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790223279 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20 Package name: cert-manager/cert-manager-istio-csr-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790223719 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20 Package name: cert-manager/cert-manager-operator-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790272426 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20 Package name: cert-manager/jetstack-cert-manager-acmesolver-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790589998 to before * rpm Other versions: affected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20 Package name: cert-manager/jetstack-cert-manager-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790589912 to before * rpm Other versions: affected

And 28 more products. The full list is on the CVE record.

Identifiers: CVE-2026-48864
CNA: redhat
Weakness (CWE): CWE-787
Tags: Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 10.0 Extended Update Support
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Memory corruption
Published: 26 May 2026
Updated: 14 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.8	High	3.1	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CNA (redhat)

CISA KEV Not listed.
EPSS 0.0023, the 13th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 26 May 2026. New records show when each source confirmed them.

Sources

References from the CNA

access.redhat.com/errata/RHSA-2026:21333 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:28236 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:36730 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:39315 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:44481 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:46836 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:48811 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:48813 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:48814 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:48815 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:48816 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:48817 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:48818 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:49775 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:50223 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:53371 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:56786 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:56853 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:56911 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:57402 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:57483 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:58981 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:59831 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:60019 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:65839 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:72394 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:72395 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:72399 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:72470 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:72475 vendor-advisoryredhat

And 24 more on the CVE record.

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.