{"id":"CVE-2026-44673","aliases":["ALSA-2026:24545","ALSA-2026:24758","ALSA-2026:25051","AZL-86816","DEBIAN-CVE-2026-44673","EUVD-2026-30484","RHSA-2026:24545","RHSA-2026:24758","RHSA-2026:25051","RHSA-2026:49666","RHSA-2026:51339","RHSA-2026:51351","RHSA-2026:51368","RHSA-2026:65467","RHSA-2026:65477","RHSA-2026:65508","RLSA-2026:24545","RLSA-2026:24758","RLSA-2026:25051","SUSE-SU-2026:22200-1","SUSE-SU-2026:22208-1","SUSE-SU-2026:2334-1","SUSE-SU-2026:2335-1","SUSE-SU-2026:2337-1","SUSE-SU-2026:2381-1","UBUNTU-CVE-2026-44673","openSUSE-SU-2026:10880-1","openSUSE-SU-2026:21113-1"],"status":"published","title":"libyang: lyb_read_string() integer overflow → heap buffer overflow","description":"libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00635,"percentile":0.50782,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-05-14T20:35:13Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"libyang","fixed_in":["1.0.184-2.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libyang","fixed_in":["2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libyang-devel","fixed_in":["2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libyang-devel-doc","fixed_in":["2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libyang","fixed_in":["2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libyang-devel","fixed_in":["2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libyang-devel-doc","fixed_in":["2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libyang","fixed_in":["2.1.148-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libyang","fixed_in":["6.4.13-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang","fixed_in":["0:1.0.184-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang-cpp-debuginfo","fixed_in":["0:1.0.184-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang-debuginfo","fixed_in":["0:1.0.184-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang-debugsource","fixed_in":["0:1.0.184-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libyang-debuginfo","fixed_in":["0:1.0.184-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang","fixed_in":["0:2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-debuginfo","fixed_in":["0:2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-debugsource","fixed_in":["0:2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-tools-debuginfo","fixed_in":["0:2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-devel","fixed_in":["0:2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-devel-doc","fixed_in":["0:2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libyang","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libyang-debuginfo","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libyang-debugsource","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-debuginfo","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-debugsource","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-devel","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-devel-doc","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang","fixed_in":["0:2.1.148-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang-debuginfo","fixed_in":["0:2.1.148-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang-debugsource","fixed_in":["0:2.1.148-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang-tools-debuginfo","fixed_in":["0:2.1.148-2.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libyang","fixed_in":["0:1.0.184-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libyang","fixed_in":["0:1.0.184-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libyang","fixed_in":["0:1.0.184-1.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libyang","fixed_in":["0:1.0.184-1.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libyang","fixed_in":["0:1.0.184-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libyang","fixed_in":["0:1.0.184-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"libyang","fixed_in":["0:2.1.148-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libyang","fixed_in":["0:2.1.148-1.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libyang","fixed_in":["0:2.1.148-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libyang","fixed_in":["0:1.0.184-2.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"libyang","fixed_in":["0:2.1.148-4.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libyang","fixed_in":["0:2.1.148-1.el9_8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libyang","fixed_in":["1.0.184-150300.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libyang","fixed_in":["1.0.184-150300.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libyang","fixed_in":["1.0.184-150300.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libyang","fixed_in":["1.0.184-150300.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libyang","fixed_in":["3.13.6-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.184-2.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libyang-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libyang-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libyang-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libyang-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.12.2-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.6-1~bpo13+1","4.2.2-1","4.2.2-2","4.2.2-3","4.3.3-1","4.3.4-1","4.7.3-1","5.0.2-1","5.0.8-1","5.4.1+really5.4.1-1","5.4.1-1","5.4.5-1","5.4.9-1","5.7.1-1","5.8.5-1","5.8.6-1","5.8.6-2","6.1.4-1","6.4.13-1","6.4.3-1","6.4.6-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.13-1"}]}],"versions":["3.12.2-1","3.13.5-1","3.13.5-2","3.13.6-1","3.13.6-1~bpo13+1","4.2.2-1","4.2.2-2","4.2.2-3","4.3.3-1","4.3.4-1","4.7.3-1","5.0.2-1","5.0.8-1","5.4.1+really5.4.1-1","5.4.1-1","5.4.5-1","5.4.9-1","5.7.1-1","5.8.5-1","5.8.6-1","5.8.6-2","6.1.4-1","6.4.3-1","6.4.6-1"]},{"source":"osv","ecosystem":"Debian:12","package":"libyang2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.148-0.1","2.1.148-0.2","2.1.30-2","2.1.30-2.1","2.1.30-2.1~exp1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libyang-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-libyang-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libyang-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libyang-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libyang-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libyang-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libyang-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-2.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-1.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-1.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.184-2.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-4.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.148-1.el9_8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-8.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-8.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.55-150500.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-150700.3.5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.184-150300.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.184-150300.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.184-150300.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.184-150300.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.6-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libyang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.148-160000.4.1"}]}],"bundled":2}],"products":[{"vendor":"cesnet","product":"libyang"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://github.com/CESNET/libyang/security/advisories/GHSA-vw2p-pq79-92xh","tags":["x_refsource_CONFIRM","exploit","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-44673","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477617","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44673.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:49666","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24758","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24545","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:51351","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:51368","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:51339","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65477","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65467","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65508","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25051","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://bugzilla.redhat.com/2477617","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-24545.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-24758.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-25051.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44673","tags":["web","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-44673","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24545.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44673","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24758.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25051.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49666.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51339.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51351.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51368.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-224576","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65467.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-224590","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65477.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65508.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:24545","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:24758","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:25051","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622200-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1265330","tags":["report"]},{"url":"https://bugzilla.suse.com/1266316","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44673","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622208-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262334-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262335-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262337-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262381-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-44673","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-44673","title":"libyang: lyb_read_string() integer overflow → heap buffer overflow","description":"libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.","status":"published","published":"2026-05-14T20:35:13.963Z","modified":"2026-09-09T12:05:01.094Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-190","CWE-190"],"updated_at":"2026-11-02T13:43:00.288193Z"}],"euvd":[{"id":"EUVD-2026-30484","description":"libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.","status":"published","published":"2026-05-14T20:35:13Z","modified":"2026-09-09T12:05:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:27.763941Z"}],"nvd":[{"id":"CVE-2026-44673","description":"libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.","status":"published","published":"2026-05-14T21:16:47.5Z","modified":"2026-10-26T14:10:00.13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:19.39893Z"}],"osv":[{"id":"DEBIAN-CVE-2026-44673","description":"libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.","status":"published","published":"2026-05-14T21:16:47.5Z","modified":"2026-10-27T09:47:36.715340515Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:55.669088Z"},{"id":"RHSA-2026:24545","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-06-09T10:08:42Z","modified":"2026-09-09T10:11:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:24758","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-06-10T10:07:59Z","modified":"2026-09-09T10:11:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25051","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-06-11T10:09:05Z","modified":"2026-09-09T10:11:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:49666","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-08-04T10:26:55Z","modified":"2026-09-09T10:16:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:51339","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-08-07T10:28:51Z","modified":"2026-09-09T10:16:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:51351","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-08-07T10:28:52Z","modified":"2026-09-09T10:16:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:51368","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-08-07T10:28:53Z","modified":"2026-09-09T10:16:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:65467","title":"Red Hat Security Advisory: libyang security, bug fix, and enhancement update","status":"published","published":"2026-09-09T10:20:30Z","modified":"2026-09-09T10:32:21.651003053Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:65477","title":"Red Hat Security Advisory: libyang security, bug fix, and enhancement update","status":"published","published":"2026-09-09T10:20:30Z","modified":"2026-09-09T10:32:21.25228782Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:65508","title":"Red Hat Security Advisory: libyang security update","status":"published","published":"2026-09-09T10:20:31Z","modified":"2026-09-09T10:32:24.311275605Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RLSA-2026:24545","title":"Important: libyang security update","description":"Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.\n\nSecurity Fix(es):\n\n* libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-11T06:00:31.924636Z","modified":"2026-06-11T06:30:05.505565225Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:24758","title":"Important: libyang security update","description":"Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.\n\nSecurity Fix(es):\n\n* libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-11T12:05:12.507415Z","modified":"2026-06-11T12:30:16.242699337Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:25051","title":"Important: libyang security update","description":"Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.\n\nSecurity Fix(es):\n\n* libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-13T00:03:17.085789Z","modified":"2026-06-13T00:30:04.747958147Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-44673","description":"libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.","status":"withdrawn","published":"2026-05-14T21:16:00Z","modified":"2026-06-16T21:45:14.775318366Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:26.396868Z"},{"id":"ALSA-2026:24545","title":"Important: libyang security update","description":"Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.  \n\nSecurity Fix(es):  \n\n  * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-08T00:00:00Z","modified":"2026-10-29T11:02:23.989220117Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:24758","title":"Important: libyang security update","description":"Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.  \n\nSecurity Fix(es):  \n\n  * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-09T00:00:00Z","modified":"2026-10-29T11:30:18.486479127Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:25051","title":"Important: libyang security update","description":"Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.  \n\nSecurity Fix(es):  \n\n  * libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-10T00:00:00Z","modified":"2026-10-29T11:32:34.017101835Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-86816","title":"CVE-2026-44673 affecting package libyang for versions less than 2.1.148-3","description":"libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB data to any libyang consumer (NETCONF server, sysrepo, etc.) can trigger a crash or potential heap corruption. This vulnerability is fixed in SO 5.2.15.","status":"published","published":"2026-05-14T21:16:47Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.190302Z"},{"id":"openSUSE-SU-2026:10880-1","title":"libyang-devel-3.13.6-3.1 on GA media","description":"These are all security issues fixed in the libyang-devel-3.13.6-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-28T00:00:00Z","modified":"2026-05-29T08:15:06.43766079Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21113-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-20T06:58:54Z","modified":"2026-06-30T18:24:42.666083803Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:22200-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-20T06:56:16Z","modified":"2026-06-24T09:00:08.106354529Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22208-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-20T06:56:16Z","modified":"2026-06-24T09:00:08.09959643Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:2334-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-10T08:42:41Z","modified":"2026-06-11T12:15:17.276423898Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2335-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-10T08:43:17Z","modified":"2026-06-11T12:15:17.240053265Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2337-1","title":"Security update for libyang","description":"This update for libyang fixes the following issues\n\n- CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific\n  metadata attributes (bsc#1266316).\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-10T08:43:47Z","modified":"2026-06-11T12:15:17.277862705Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2381-1","title":"Security update for libyang","description":"This update for libyang fixes the following issue\n\n- CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when\n  parsing a maliciously crafted LYB binary blob (bsc#1265330).\n","status":"published","published":"2026-06-12T06:50:52Z","modified":"2026-06-13T08:00:05.404158682Z","updated_at":"2026-11-02T15:54:03.991985Z"}]}}