---
id: CVE-2026-44605
title: 'Rpm: heap buffer overflow in ndb slot table parsing'
summary: >-
  A flaw was found in the RPM Package Manager (RPM). A local user could be
  affected by a heap buffer overflow vulnerability when processing a specially
  crafted NDB database file. This issue arises from an error in how RPM handles
  certain c…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-190
vendor: Red Hat
product: rpm-main
affected:
  - rpm-main (all versions)
  - rpm (all versions)
  - rust-bootupd (all versions)
  - rpm (all versions)
  - rpm (all versions)
  - rpm (all versions)
  - rpm (all versions)
  - rust-bootupd (all versions)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-08-05T18:41:05.449219Z'
published: '2026-08-05'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T11:28:42.957Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-44605'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2026:33507'
    label: 'RHSA-2026:33507'
  - url: 'https://access.redhat.com/security/cve/CVE-2026-44605'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2482481'
    label: RHBZ#2482481
tags:
  - cve.org
epss: 0.00178
epssPercentile: 0.0691
ingestedAt: '2026-10-16T12:05:46.482Z'
---

## Overview

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.

## Affected

- `rpm-main (all versions)`
- `rpm (all versions)`
- `rust-bootupd (all versions)`
- `rpm (all versions)`
- `rpm (all versions)`
- `rpm (all versions)`
- `rpm (all versions)`
- `rust-bootupd (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.