https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T18:47:18.523137+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-5916 CVE-2025-5916 — Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c 2026-10-14T18:47:18.525446+00:00

Affected: libarchive, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4

A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. This bug affects libarchive versions prior to 3.8.0.

 https://cve.radiocsirt.org/vuln/usn-7601-1 USN-7601-1 — libarchive vulnerabilities 2026-10-14T18:47:18.525508+00:00

Affected: Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive

It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2025-5914)

It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to read sensitive data or cause a denial of service. (CVE-2025-5915)

It was discovered that libarchive incorrectly handled certain WARC archive files. If a user or automated system were tricked into processing a specially crafted WARC archive, an attacker could use this issue to cause libarchive to crash, resulting in a denial of service. (CVE-2025-5916)

It was discovered that libarchive incorrectly handled certain file names when handling prefixes and suffixes. An attacker could possibly use this issue to cause libarchive to crash, resulting in a denial of service. (CVE-2025-5917)