Libsolv contains a heap buffer overflow that triggers during decompression of data in .solv files. Insufficient validation allows outside‑of‑bounds writes, leading to memory corruption, which can expose data, alter program execution, or crash the application. The flaw is identified as CWE‑787 and is rated with a CVSS base score of 7.8, indicating high potential impact on affected systems.

The vulnerability applies to several Red Hat families, including Red Hat Enterprise Linux versions 7 through 10, Red Hat OpenShift Container Platform 4, Red Hat Satellite 6, Red Hat Hardened Images, and Red Hat Update Infrastructure 4 for Cloud Providers. The specific product versions are not detailed in the advisory, so any current release remains potentially vulnerable until an official fix is issued.

With a CVSS score of 7.8, the flaw represents a significant risk. Exploitation would require an attacker to supply a malicious .solv file that the system processes; this could occur through package management, software updates, or supply‑chain compromise. The EPSS score is not available, and the issue is not yet listed in CISA’s KEV catalog, suggesting no confirmed widespread exploitation yet. Nonetheless, the potential for denial of service or data exposure warrants immediate attention.