AZL-88056

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88056.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-88056
Upstream
Published
2026-05-21T00:16:35Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-9149 affecting package libsolv for versions less than 0.7.28-4
Details

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing negative size values in the repo_add_solv function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS).

References

Affected packages

Azure Linux:3 / libsolv

Package

Name
libsolv
Purl
pkg:rpm/azure-linux/libsolv

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7.28-4

Database specific

source 
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88056.json"