This vulnerability in libsolv arises from improper handling of negative size values in the repo_add_solv function when parsing .solv files. The negative values cause the function to allocate less memory than required, leading to a heap buffer overflow through out-of-bounds writes. This can be exploited remotely without privileges but requires user interaction, resulting in denial of service. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact.

Successful exploitation of this vulnerability can cause a denial of service by crashing or destabilizing the affected system due to heap corruption. There is no indication of confidentiality or integrity compromise. No known active exploits have been reported at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-9149 for current remediation guidance. Until an official fix is released, users should exercise caution when processing untrusted .solv files and consider limiting exposure to such files. No vendor-provided workaround or temporary fix is currently documented.