LI
Product
libsolv
14
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 6Low 1
Watch
Add libsolv to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9149 | 6.5 | May 20 | Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file Affected: through 0.7.36 |
| CVE-2026-9150 | 6.5 | May 20 | Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums Affected: through 0.7.36 |
| CVE-2021-44568 | 6.5 | Feb 21 | Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line… Affected: before 0.7.17 |
| CVE-2018-20534 | 6.5 | Dec 28 | There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service Affected: through 0.7.2 |
| CVE-2018-20533 | 6.5 | Dec 28 | There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service Affected: through 0.7.2 |
| CVE-2018-20532 | 6.5 | Dec 28 | There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service Affected: through 0.7.2 |
Showing 6