{"id":"CVE-2026-44605","title":"Rpm: heap buffer overflow in ndb slot table parsing","summary":"A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain c…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-190"],"vendor":"Red Hat","product":"rpm-main","affected":["rpm-main (all versions)","rpm (all versions)","rust-bootupd (all versions)","rpm (all versions)","rpm (all versions)","rpm (all versions)","rpm (all versions)","rust-bootupd (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-05T18:41:05.449219Z"},"published":"2026-08-05","updated":"2026-10-16","sourceUpdated":"2026-10-16T11:28:42.957Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-44605","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:33507","label":"RHSA-2026:33507"},{"url":"https://access.redhat.com/security/cve/CVE-2026-44605"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2482481","label":"RHBZ#2482481"}],"tags":["cve.org"],"epss":0.00178,"epssPercentile":0.0691,"ingestedAt":"2026-10-16T12:05:46.482Z","slug":"CVE-2026-44605","body":"## Overview\n\nA flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.\n\n## Affected\n\n- `rpm-main (all versions)`\n- `rpm (all versions)`\n- `rust-bootupd (all versions)`\n- `rpm (all versions)`\n- `rpm (all versions)`\n- `rpm (all versions)`\n- `rpm (all versions)`\n- `rust-bootupd (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nMitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}