NetSight
IP …
high7.8

CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.

Impact

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Affected products

VendorProductAffected versions
LibarchiveLibarchive
before 3.8.0
RedhatOpenshift Container Platform
Version 4.0
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0, 9.0, 10.0

Weakness classification

CWE-190

References