REDHAT-BUG-2567100: Buffer Overflow

Published Nov 4, 2026

Updated

When processing a crafted XCCDF document in sds-compose option the OpenSCAP package may face a one byte heap buffer overflow, which can lead to small heap metadata corruption resulting in a possible program crash and in Denial-of-Service as a result.

Affected Software

1 affected component

OpenSCAP OpenSCAP

Event History

Nov 4, 2026

Data Sourced

via Red Hat·04:44 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What must occur for the issue to be triggered?

The OpenSCAP sds-compose option must process a crafted XCCDF document. The issue is associated with a one-byte heap buffer overflow during that processing.

What is the practical impact described for affected processing?

The overflow can cause limited heap metadata corruption and may crash the program. The described result is a denial of service.

REDHAT-BUG-2567100: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What must occur for the issue to be triggered?

What is the practical impact described for affected processing?

Company

Resources

Contact

Frequently Asked Questions

What must occur for the issue to be triggered?

What is the practical impact described for affected processing?