Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

When processing a crafted XCCDF document in `sds-compose` option the OpenSCAP package may face a one byte heap buffer overflow, which can lead to small heap metadata corruption resulting in a possible program crash and in Denial-of-Service as a result.