Vulnerability · Published Jul 16, 2026 · Assigned by redhat
CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
High 7.5
In plain English
A high-severity stack buffer overflow in libsolv from OpenSUSE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this crafted signature could lead to a denial of service in automated package or repository processing workflows.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libsolv | no fix listed | DEBIAN-CVE-2026-48863 |
| Debian:13 | libsolv | no fix listed | DEBIAN-CVE-2026-48863 |
| Debian:14 | libsolv | 0.7.38-1 | DEBIAN-CVE-2026-48863 |
| Ubuntu:22.04:LTS | libsolv | no fix listed | UBUNTU-CVE-2026-48863 |
| Ubuntu:24.04:LTS | libsolv | no fix listed | UBUNTU-CVE-2026-48863 |
| Ubuntu:25.10 | libsolv | no fix listed | UBUNTU-CVE-2026-48863 |
| Ubuntu:26.04:LTS | libsolv | no fix listed | UBUNTU-CVE-2026-48863 |
| Ubuntu:26.10 | libsolv | no fix listed | UBUNTU-CVE-2026-48863 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenSUSE | libsolv | 0.6.4 – before 0.7.38 |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Hardened Images | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat Satellite 6 | see references |
| Red Hat | Red Hat Update Infrastructure 4 for Cloud Providers | see references |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://access.redhat.com/security/cve/CVE-2026-48863 vdb-entry, x_refsource_REDHAT
- RHBZ#2460975 issue-tracking, x_refsource_REDHAT
- https://github.com/openSUSE/libsolv/commit/44f8c085045b1f771641091bbb2b810d12cff9e8#diff-309f245ec9b669ec78b8159c39e6f50130b4d4a0448f742685f7833d04bc4caaR592
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48863.json x_sadp-csaf-vex