AZL-78047

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-78047.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-78047

Upstream

CVE-2026-24800

Published

2026-01-27T09:15:49Z

Modified

2026-04-21T04:34:22.722363Z

Summary

CVE-2026-24800 affecting package cloud-hypervisor for versions less than 32.0-6

Details

Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in tildearrow furnace (extern/zlib modules). This vulnerability is associated with program files inflate.C.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24800

Affected packages

Azure Linux:2 / cloud-hypervisor

Package

Name: cloud-hypervisor
Purl: pkg:rpm/azure-linux/cloud-hypervisor

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

32.0-6

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-78047.json"