CVE-2025-5914

Name
CVE-2025-5914
Description
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
vdb-entry https://access.redhat.com/security/cve/CVE-2025-5914
issue-tracking https://bugzilla.redhat.com/show_bug.cgi?id=2370861
secalert@redhat.com https://github.com/libarchive/libarchive/pull/2598
secalert@redhat.com https://github.com/libarchive/libarchive/releases/tag/v3.8.0

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:* libarchive >= None < 3.8.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
libarchive edge-main 3.7.7-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libarchive edge-main 3.7.9-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable