LI
Product
libsolv
14
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 6Low 1
Watch
Add libsolv to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48864 | 7.8 | May 26 | Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data Affected: 0.7.36 |
| CVE-2026-48863 | 7.5 | Jul 16 | Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service Affected: 0.6.4 before 0.7.38 |
| CVE-2021-33938 | 7.5 | Sep 2 | Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service Affected: through 0.7.17 |
| CVE-2021-33930 | 7.5 | Sep 2 | Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service Affected: through 0.7.17 |
| CVE-2021-33929 | 7.5 | Sep 2 | Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service Affected: through 0.7.17 |
| CVE-2021-33928 | 7.5 | Sep 2 | Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service Affected: through 0.7.17 |
| CVE-2019-20387 | 7.5 | Jan 21 | repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema Affected: before 0.7.6 |
Showing 7