CVE-2025-44089: Protection Mechanism Failure

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

CVE-2025-44090: Protection Mechanism Failure

An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

CVE-2025-44090

An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

CVE-2025-44089

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...

PYSEC-2026-2041 Weblate vulnerable to improper sanitization of project backups

Impact Weblate didn't correctly validate filenames when restoring project backup. It may be possible to gain unauthorized access to files on the server using a crafted ZIP file. Patches This issue has been addressed in Weblate 5.6.2 via...

DEBIAN-CVE-2026-11210

Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. Chromium security severity: Medium...

CVE-2026-11210

A security vulnerability exists in the Safe Browsing component of Google Chrome and Microsoft Edge browsers (Chromium-based) prior to version 149.0.7827.53 . The issue stems from an inappropriate implementation that allows a remote attacker to bypass discretionary access control by providing a sp...

PT-2025-55407

execute filter audio in archive read support format rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...

K000150321: libarchive vulnerability CVE-2016-10209

Security Advisory Description The archivewstringappendfrommbs function in archivestring.c in libarchive 3.2.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted archive file. CVE-2016-10209 Impact This vulnerability may result in a...

K000148639: libarchive vulnerabilities CVE-2024-48957 and CVE-2024-48958

Security Advisory Description CVE-2024-48957 executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. CVE-2024-48958 executefilterdelta in archivereadsupportformatrar.c in libarchive befo...

SUSE-SU-2024:3940-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability bsc1225972. - CVE-2024-48958: Fixed out-of-bounds access via a crafted archive file in executefilterdelta function bsc1231624...

MGASA-2024-0346 Updated libarchive packages fix security vulnerabilities

executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. CVE-2024-48957 executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a...

CVE-2024-48958

A flaw was found in the libarchive library. An out-of-bounds access in the executefilterdelta function in the libarchive/archivereadsupportformatrar.c file can be triggered due to a missing validation when a specially crafted RAR archive is processed. This issue may cause the application linked t...

CVE-2024-48957

executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...

CVE-2024-48958

executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...

CVE-2024-48958

CVE-2024-48958 affects libarchive’s archive_read_support_format_rar.c, where execute_filter_delta can trigger out-of-bounds access in crafted archives because src can move beyond dst. Affects libarchive up to version 3.7.4 (pre-3.7.5). Mitigation: upgrade to 3.7.5 or later; the issue is resolved ...

CVE-2024-48958: Out-of-bounds Read

executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...

CVE-2024-48957

CVE-2024-48957 affects libarchive prior to 3.7.5. The vulnerability is in execute_filter_audio within archive_read_support_format_rar.c, allowing out-of-bounds access when processing a crafted archive because src can move beyond dst. Connected documents consistently describe this as a libarchive ...

CVE-2024-48957: Out-of-bounds Read

executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...

CVE-2024-48958

executefilterdelta in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...