libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

RHEL 9 : libarchive (RHSA-2025:14142)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14142 advisory. The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM...

ALSA-2025:14137 Important: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

ALSA-2025:14135 Important: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

Important: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

CentOS 9 : libarchive-3.5.3-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libarchive-3.5.3-6.el9 build changelog. - A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involve...

FreeBSD : FreeBSD -- Integer overflow in libarchive leading to double free (66f35fd9-73f5-11f0-8e0e-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 66f35fd9-73f5-11f0-8e0e-002590c1f29c advisory. An integer overflow in the archivereadformatrarseekdata function may lead to a double free problem...

Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: CVE-2024-36618: Fixed integer overflow iff ULONGMAX INT64MAX bsc1234020. New CVE references, fixed in previous release: CVE-2024-36617: avformat/cafdec: dont seek beyond 64bit bsc1234019. CVE-2024-36616: avformat/westwoodvqa: Fix 2g packets...

Astra Linux – Vulnerability in libarchive

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, allowin...

SUSE CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

AZL-63860 CVE-2025-5914 affecting package libarchive for versions less than 3.6.1-7

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

DEBIAN-CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

AZL-63783 CVE-2025-5914 affecting package libarchive for versions less than 3.7.7-3

A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enablin...

libarchive 资源管理错误漏洞

libarchive is a multi-format archive and compression library open-sourced by libarchive. A resource management error vulnerability exists in libarchive that stems from an integer overflow in the archivereadformatrarseekdata function, which could lead to a double release and memory corruption...

CVE-2024-33259

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scannerseek at jerry-core/parser/js/js-scanner-util.c...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the archivereadformatrarseekdata function. An attacker can cause memory corruption or potentially execute arbitrary code by triggering a double-free condition through crafted input. Remediation Upgrade libarchive to...

The vulnerability of the folio_seek_hole_data() function in the mm/filemap.c module of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the folioseekholedata function in the mm/filemap.c module of Linux operating systems is related to the execution of a loop with an unreachable exit condition due to numerical truncation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an integer overflow vulnerability, which stems from the folioseekholedata function incorrectly truncating 64-bit offsets to 32-bit in the 32-bit kerne...

PT-2024-40631 · Git +1 · Flac

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the process page , FLAC ogg decoder aspect skip link, and FLAC stream decoder...