Skip to main content
Version: v1.1.x

CVE-2026-9150

CVE Details

Visit the official vulnerability details page for CVE-2026-9150 to learn more.

Initial Publication

05/20/2026

Last Update

05/21/2026

Third Party Dependency

libsolv

NIST CVE Summary

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.

CVE Severity

6.5

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Undergoing Analysis

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.1.1⚠️ Impacted⚠️ Impacted
1.0.7⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.