Astra Linux – vulnerability in libarchive

Libarchive versions 3.4.1 through 3.5.1 contain a use-after-free in copystring invoked by douncompressblock and processblock...

PT-2026-93384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds page array access exists in the zisofs component of the ISO9660 file system. The issue occurs in the zisofs uncompress block function's empty-block fast path, which fail...

JLSEC-2025-234 libarchive 3.4.1 through 3.5.1 has a use-after-free in `copy_string` (called from...

libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring called from douncompressblock and processblock...

PT-2025-55097

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy string called from do uncompress block and process block...

SUSE CVE-2021-36976

libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring called from douncompressblock and processblock...

AZL-6614 CVE-2021-36976 affecting package libarchive for versions less than 3.6.0-1

libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring called from douncompressblock and processblock...

DEBIAN-CVE-2021-36976

libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring called from douncompressblock and processblock...

ALPINE-CVE-2021-36976

libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring called from douncompressblock and processblock...

htslib:hts_open_fuzzer: Heap-use-after-free in decode_name

Detailed Report: https://oss-fuzz.com/testcase?key=5662909893050368 Project: htslib Fuzzing Engine: libFuzzer Fuzz Target: htsopenfuzzer Job Type: libfuzzerasanhtslib Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62a00000025d Crash State: decodename decodenames...

PT-2021-28173

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2021-28017

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions: rans...

PT-2021-28019

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, which involve functions such as arith...

OSV-2018-160 Heap-buffer-overflow in do_uncompress_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11011 Crash type: Heap-buffer-overflow WRITE 1 Crash state: douncompressblock processblock douncompressfile...

PT-2021-27508

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the functions do uncompress block, process block, and do...

PT-2021-27479

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions read bits 16, decode number, and do uncompress block. No...

PT-2021-27744

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash state involves functions such as read bits 16, decode numbe...

PT-2020-22435

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: copy string, do uncompress block, and process block. No...

PT-2020-22222

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 1 crash type. The crash state involves functions such as copy string, do uncompress block, and process...

PT-2020-22246

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a Heap-buffer-overflow READ 1. The crash state involves functions such as read...