Threats tagged 'ghsa-j65x-29mg-x4cj'

A heap-based out-of-bounds read vulnerability exists in libmodulemd during YAML serialization of module stream v2 rpm-map metadata. The flaw occurs because an inner loop incorrectly uses the count of digest algorithms instead of the number of checksums, which can cause a crash and denial of service when processing crafted metadata with multiple digest types. Exploitation requires local access to parse malicious modulemd v2 input. No confidentiality, integrity, or code execution impacts have been established.