CVE-2026-96280

Published: Set 27, 2026 Last Modified: Set 27, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an OCI registry can craft a delta stream that triggers this during flatpak install/update, potentially achieving code execution on 32-bit systems.

197

Numeric Truncation Error

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity
Potential Impacts:
Modify Memory
Applicable Platforms
Languages: C, C++, Java, C#
Likelihood of Exploit: Low
View CWE Details
https://access.redhat.com/security/cve/CVE-2026-96280
https://access.redhat.com/security/cve/CVE-2026-96280
https://bugzilla.redhat.com/show_bug.cgi?id=2539419
https://bugzilla.redhat.com/show_bug.cgi?id=2539419
https://github.com/flatpak/flatpak/security/advisories/GHSA…
https://github.com/flatpak/flatpak/security/advisories/GHSA-jr92-2v97-wgvc