Security Advisory

CVE-2026-48863

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-16 00:46:12

Last updated 2026-08-24 12:07:07

Assigner redhat

CVSS score 7.5

State PUBLISHED

Description

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this crafted signature could lead to a denial of service in automated package or repository processing workflows.

← Browse all CVEs View on cve.org ↗