Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
Historical advisory recorded 30 Oct 2026 07:48:55 UTC. Read the latest advisory.
cve-program · CVE-2026-92824
PublishedA flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an out-of-bounds read during YAML serialization, typically causing a crash and resulting in a denial of service.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-92824
PublishedLibmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an out-of-bounds read during YAML serialization, typically causing a crash and resulting in a denial of service.
- Source published
- 21 Oct 2026 03:18:41 UTC
- Source modified
- 30 Oct 2026 06:04:31 UTC
- Saved here
- 30 Oct 2026 07:48:55 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H