Threats Tagged 'oesa-2026-4509'

A vulnerability in libsolv, a dependency-resolution library used by RPM-based package managers like dnf and zypper, allows an out-of-bounds memory write when processing specially crafted or corrupted .solv cache files. This flaw can cause the affected package management tools to crash, resulting in a denial of service. The vulnerability does not enable arbitrary code execution because the out-of-bounds write stores a fixed, non-attacker-controlled value.