CVE-2025-5918Low· 3.9▾ SunlitA vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 21.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.4%
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.
libarchive < 3.8.0openshift_container_platform = 4.0enterprise_linux = 6.0enterprise_linux = 7.0enterprise_linux = 8.0enterprise_linux = 9.0Upgrade past the affected range:
libarchive 3.8.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-4424High· 7.5A flaw was found in libarchive
CVE-2025-5917Low· 2.8A vulnerability has been identified in the libarchive library
CVE-2025-5916Low· 3.9A vulnerability has been identified in the libarchive library
CVE-2025-5915Medium· 6.6A vulnerability has been identified in the libarchive library
CVE-2025-5914High· 7.8A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function
CVE-2025-64031Low· 2.5libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c, aka GHSA-92wx-p669-8gr9