A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to out-of-bounds memory access. This could result in information disclosure, alteration of program execution, or a denial of service.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1241:02 advisory.

    * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv     page data (CVE-2026-48864)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:36730 advisory.

    * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv     page data (CVE-2026-48864)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-36730 advisory.

    [0.7.20-7]
    - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)       (RHEL-178970)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36730 advisory.

    * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv     page data (CVE-2026-48864)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:36730 advisory.

    The libsolv packages provide a library for resolving package dependencies using a satisfiability     algorithm.

    Security Fix(es):

    * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv     page data (CVE-2026-48864)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:28236 advisory.

    * libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512     checksums (CVE-2026-9150)
      * libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file     (CVE-2026-9149)
      * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv     page data (CVE-2026-48864)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:28236 advisory.

    * libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512     checksums (CVE-2026-9150)

    * libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file     (CVE-2026-9149)

    * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv     page data (CVE-2026-48864)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:28236 advisory.

    The libsolv packages provide a library for resolving package dependencies using a satisfiability     algorithm.

    Security Fix(es):

    * libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512     checksums (CVE-2026-9150)

    * libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file     (CVE-2026-9149)

    * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv     page data (CVE-2026-48864)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libsolv-0.7.24-6.el9 build changelog.

  - A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1798 advisory.

    A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification     component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote     attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this     crafted signature could lead to a denial of service in automated package or repository processing     workflows. (CVE-2026-48863)

    A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

    A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a     specially crafted .solv file containing negative size values in the repo_add_solv function. This leads to     an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to     cause a denial of service (DoS). (CVE-2026-9149)

    A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian     metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit     this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of     service (DoS) in the affected system. (CVE-2026-9150)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libsolv installed on the remote host is prior to 0.6.34-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3338 advisory.

    A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

    A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a     specially crafted .solv file containing negative size values in the repo_add_solv function. This leads to     an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to     cause a denial of service (DoS). (CVE-2026-9149)

    A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian     metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit     this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of     service (DoS) in the affected system. (CVE-2026-9150)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-     controlled compressed data within `.solv` files due to insufficient input validation. An attacker can     provide a specially crafted `.solv` file, which, when processed by a vulnerable application, can lead to     out-of-bounds memory access. This could result in information disclosure, alteration of program execution,     or a denial of service. (CVE-2026-48864)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
326301	MiracleLinux 8 : libsolv-0.7.20-7.el8_10 (AXSA:2026-1241:02)	Nessus	Miracle Linux Local Security Checks	high
326059	AlmaLinux 8 : libsolv (ALSA-2026:36730)	Nessus	Alma Linux Local Security Checks	high
325927	Oracle Linux 8 : libsolv (ELSA-2026-36730)	Nessus	Oracle Linux Local Security Checks	high
325882	RockyLinux 8 : libsolv (RLSA-2026:36730)	Nessus	Rocky Linux Local Security Checks	high
325740	RHEL 8 : libsolv (RHSA-2026:36730)	Nessus	Red Hat Local Security Checks	high
322541	AlmaLinux 10 : libsolv (ALSA-2026:28236)	Nessus	Alma Linux Local Security Checks	medium
322390	RockyLinux 10 : libsolv (RLSA-2026:28236)	Nessus	Rocky Linux Local Security Checks	medium
322341	RHEL 10 : libsolv (RHSA-2026:28236)	Nessus	Red Hat Local Security Checks	medium
320219	CentOS 9 : libsolv-0.7.24-6.el9	Nessus	CentOS Local Security Checks	high
319848	Amazon Linux 2023 : libsolv, libsolv-demo, libsolv-devel (ALAS2023-2026-1798)	Nessus	Amazon Linux Local Security Checks	medium
319816	Amazon Linux 2 : libsolv, --advisory ALAS2-2026-3338 (ALAS-2026-3338)	Nessus	Amazon Linux Local Security Checks	medium
317038	Linux Distros Unpatched Vulnerability : CVE-2026-48864	Nessus	Misc.	high

Detections

Analytics

CVE-2026-48864

high

Tenable Plugins

high

high

high

high

high

medium

medium

medium

high

medium

medium

high