Libsolv (Opensuse) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 63 known versions, newest CVE from 2026-07-16. Vendor: Opensuse.
CVEs of Libsolv
- CVE-2026-48863 - CVSS 7.5 (high), 2026-07-16: A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when…
- CVE-2026-48864 - CVSS 7.8 (high), 2026-05-26: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to…
- CVE-2026-9149 - CVSS 6.5 (medium), 2026-05-21: A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size…
- CVE-2026-9150 - CVSS 6.5 (medium), 2026-05-20: A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted…
- CVE-2021-44568 - CVSS 6.5 (medium), 2022-02-21: Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at…
- CVE-2021-33930 - CVSS 7.5 (high), 2021-09-02: Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
- CVE-2021-33929 - CVSS 7.5 (high), 2021-09-02: Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
- CVE-2021-33928 - CVSS 7.5 (high), 2021-09-02: Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
- CVE-2021-33938 - CVSS 7.5 (high), 2021-09-02: Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service.
- CVE-2021-3200 - CVSS 3.3 (low), 2021-05-18: Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int…
- CVE-2019-20387 - CVSS 7.5 (high), 2020-01-21: repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input…
- CVE-2018-20533 - CVSS 6.5 (medium), 2018-12-28: There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of…
- CVE-2018-20532 - CVSS 6.5 (medium), 2018-12-28: There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
- CVE-2018-20534 - CVSS 6.5 (medium), 2018-12-28: There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute…
