A heap-based buffer overflow vulnerability exists in the RPM Package Manager (rpm) due to improper handling of the RPMTAG_FILESIGNATURES header in crafted unsigned RPM packages. This flaw allows an attacker to cause a buffer overflow by providing a tag with an incorrect header type, leading to memory corruption when processed by rpm2cpio, rpm2archive, or rpm -qlvp commands on untrusted packages. The issue is fixed in version 4.18.2-43.oe2403sp3.