A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libsolv-0.7.24-6.el9 build changelog.

  - A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1798 advisory.

    A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification     component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote     attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this     crafted signature could lead to a denial of service in automated package or repository processing     workflows. (CVE-2026-48863)

    A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

    A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a     specially crafted .solv file containing negative size values in the repo_add_solv function. This leads to     an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to     cause a denial of service (DoS). (CVE-2026-9149)

    A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian     metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit     this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of     service (DoS) in the affected system. (CVE-2026-9150)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libsolv installed on the remote host is prior to 0.6.34-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3338 advisory.

    A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

    A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a     specially crafted .solv file containing negative size values in the repo_add_solv function. This leads to     an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to     cause a denial of service (DoS). (CVE-2026-9149)

    A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian     metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit     this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of     service (DoS) in the affected system. (CVE-2026-9150)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
320219	CentOS 9 : libsolv-0.7.24-6.el9	Nessus	CentOS Local Security Checks	high
319848	Amazon Linux 2023 : libsolv, libsolv-demo, libsolv-devel (ALAS2023-2026-1798)	Nessus	Amazon Linux Local Security Checks	medium
319816	Amazon Linux 2 : libsolv, --advisory ALAS2-2026-3338 (ALAS-2026-3338)	Nessus	Amazon Linux Local Security Checks	medium
317038	Linux Distros Unpatched Vulnerability : CVE-2026-48864	Nessus	Misc.	high

Detections

Analytics

CVE-2026-48864

high

Tenable Plugins

high

medium

medium

high