opensuse libsolv

Name: opensuse libsolv
Brand: opensuse

productUS

cpe:2.3:a:opensuse:libsolv:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical5high5medium1low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-20387US	high7.5	2.34% (84th)	—	0.7.6	2020-01-21	< 0.7.6
CVE-2018-20534US	medium6.5	2.24% (83rd)	—	no fix	2018-12-28	≤ 0.7.2
CVE-2018-20533US	medium6.5	2.08% (81st)	—	no fix	2018-12-28	≤ 0.7.2
CVE-2018-20532US	medium6.5	2.06% (81st)	—	no fix	2018-12-28	≤ 0.7.2
CVE-2021-44568US	medium6.5	1.79% (78th)	—	0.7.17	2022-02-21	< 0.7.17
CVE-2021-33928US	high7.5	1.47% (74th)	—	no fix	2021-09-02	≤ 0.7.17
CVE-2021-33930US	high7.5	1.46% (74th)	—	no fix	2021-09-02	≤ 0.7.17
CVE-2021-33929US	high7.5	1.44% (73rd)	—	no fix	2021-09-02	≤ 0.7.17
CVE-2021-33938US	high7.5	1.42% (73rd)	—	no fix	2021-09-02	≤ 0.7.17
CVE-2021-3200US	low3.3	1.31% (71st)	—	0.7.17	2021-05-18	< 0.7.17
CVE-2026-9150US	—	0.41% (35th)	—	no fix	2026-05-20	≤ 0.7.36
CVE-2026-9149US	medium6.5	0.31% (24th)	—	no fix	2026-05-21	≤ 0.7.36
CVE-2026-48864US	—	0.23% (13th)	—	no fix	2026-05-26	= 0.7.36

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-399CWE-3991 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.