Remote Code Execution (RCE)

libarchive.so is vulnerable to remote code execution. A RAR file with an invalid zero dictionary size was not properly validated which leads to a zero-sized allocation for the dictionary storage and overwritten during the dictionary initialization, allowing a remote attacker to execute arbitrary code via a heap-based buffer overflow.