Bug 2567100 (CVE-2026-122056) - CVE-2026-122056 openscap: One-byte heap buffer overflow in sds-compose may lead to Denial-of-Service
Summary: CVE-2026-122056 openscap: One-byte heap buffer overflow in sds-compose may le...
Keywords:
Status: NEW
Alias: CVE-2026-122056
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2569245
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-04 16:44 UTC by OSIDB Bzimport
Modified: 2026-11-09 19:50 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-04 16:44:11 UTC 
When processing a crafted XCCDF document in `sds-compose` option the OpenSCAP package may face a one byte heap buffer overflow, which can lead to small heap metadata corruption resulting in a possible program crash and in Denial-of-Service as a result.
Note You need to log in before you can comment on or make changes to this bug.