A heap-based buffer overflow vulnerability exists in the RPM Package Manager (rpm) due to improper handling of the RPMTAG_FILESIGNATURES header type in crafted, unsigned RPM packages. This flaw allows an attacker to cause a buffer overflow when the hex2binv() function allocates an insufficient buffer and writes attacker-controlled data beyond its bounds. The vulnerability can be triggered using rpm2cpio, rpm2archive, or rpm -qlvp commands on a malicious package. A fix is available in version 4.17.0-54.oe2203sp4.