GIVE YOUR AGENT THE EVIDENCE

Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

GIVE YOUR AGENT THE EVIDENCE

Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

cve.new
Check your stack
CVE-2026-96280high7.5

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

Impact

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an OCI registry can craft a delta stream that triggers this during flatpak install/update, potentially achieving code execution on 32-bit systems.

Source excerpt · redhat

What to do

Only install applications from trusted OCI registries. Flatpak remotes using the default OSTree transport are not affected.

redhat guidance

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

Red Hat · Red Hat Enterprise Linux 10

Other versions: affected

Version / rangeSource status
0:1.16.0-9.el10_2.4 to before *unaffected
redhat version evidence

Red Hat · Red Hat Enterprise Linux 8

Other versions: affected

Version / rangeSource status
0:1.12.9-7.el8_10 to before *unaffected
redhat version evidence

Red Hat · Red Hat Enterprise Linux 9

Other versions: affected

Version / rangeSource status
0:1.12.9-4.el9_8.4 to before *unaffected
redhat version evidence

Red Hat · Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Other versions: affected

Version / rangeSource status
0:1.12.9-3.el9_4.5 to before *unaffected
redhat version evidence

Red Hat · Red Hat Enterprise Linux 9.6 Extended Update Support

Other versions: affected

Version / rangeSource status
0:1.12.9-4.el9_6.5 to before *unaffected
redhat version evidence

Original source description

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an OCI registry can craft a delta stream that triggers this during flatpak install/update, potentially achieving code execution on 32-bit systems.

References