CVE-2026-48863
High
Description
A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this crafted signature could lead to a denial of service in automated package or repository processing workflows.
SeverityHigh
CVSS7.5
Exploit probability—
ProductOpensuse Libsolv
PublishedJul 16, 2026
First seenJul 16, 2026
Weakness typeCWE-121CWE-121
How to fix
Update
- OpenSUSE libsolv0.7.38 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSUSE libsolv | 0.6.4 ≤ v < 0.7.38 | 0.7.38 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.