{"id":"DEBIAN-CVE-2026-82327","details":"A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. When libsolv rewrites a .solv cache file, it reads directory-id values from the file's compressed filelist data without validating that they fall within the expected range. A corrupted or specially crafted .solv cache file (for example, one left in a torn state after an unclean system shutdown) can cause an out-of-bounds memory write when a tool such as dnf, yum, or zypper next processes it. Successful exploitation is expected to result in a crash of the affected tool (denial of service); it is not expected to allow arbitrary code execution because the out-of-bounds write always stores a fixed, non-attacker-controlled value.","modified":"2026-09-29T11:03:17.645432565Z","published":"2026-08-28T16:18:34.067Z","upstream":["CVE-2026-82327"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-82327"}],"affected":[{"package":{"name":"libsolv","ecosystem":"Debian:12","purl":"pkg:deb/debian/libsolv?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.23-1","0.7.23-1+deb12u1","0.7.24-1","0.7.25-1","0.7.26-1","0.7.26-2","0.7.27-1","0.7.27-2","0.7.28-1","0.7.28-1.1~exp1","0.7.29-1","0.7.30-1","0.7.30-2","0.7.31-1","0.7.32-1","0.7.35-1","0.7.36-1","0.7.37-1","0.7.38-1","0.7.39-1","0.7.39-2","0.7.40-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2026-82327.json"}},{"package":{"name":"libsolv","ecosystem":"Debian:13","purl":"pkg:deb/debian/libsolv?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.32-1","0.7.35-1","0.7.36-1","0.7.37-1","0.7.38-1","0.7.39-1","0.7.39-2","0.7.40-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2026-82327.json"}},{"package":{"name":"libsolv","ecosystem":"Debian:14","purl":"pkg:deb/debian/libsolv?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.32-1","0.7.35-1","0.7.36-1","0.7.37-1","0.7.38-1","0.7.39-1","0.7.39-2","0.7.40-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2026-82327.json"}}],"schema_version":"1.9.0"}