https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:16:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11855 bdu:2025-11855 https://cve.radiocsirt.org/vuln/bdu:2025-11855 https://cve.radiocsirt.org/vuln/bell-cve-2025-5915 <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:stream: libarchive</p> <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:stream: libarchive</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-5915 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/euvd-2026-362299 EUVD-2026-362299 https://cve.radiocsirt.org/vuln/euvd-2026-362299 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5915 <p>A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.</p> <p>A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5915 https://cve.radiocsirt.org/vuln/ghsa-rfq2-xjgr-h957 <p>A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.</p> <p>A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.</p> https://cve.radiocsirt.org/vuln/ghsa-rfq2-xjgr-h957 https://cve.radiocsirt.org/vuln/msrc_cve-2025-5915 msrc_CVE-2025-5915 https://cve.radiocsirt.org/vuln/msrc_cve-2025-5915 https://cve.radiocsirt.org/vuln/oesa-2025-1623 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>A vulnerability was found in libarchive up to 3.7.x (File Compression Software). It has been classified as critical.CWE is classifying the issue as CWE-415. The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 3.8.0 eliminates this vulnerability.(CVE-2025-5914)</p> <p>A vulnerability was found in libarchive up to 3.7.x (File Compression Software). It has been declared as critical.The CWE definition for the vulnerability is CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 3.8.0 eliminates this vulnerability.(CVE-2025-5915)</p> <p>A vulnerability was found in libarchive up to 3.7.x (File Compression Software). It has been rated as critical.Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>A vulnerability was found in libarchive up to 3.7.x (File Compression Software). It has been classified as critical.CWE is classifying the issue as CWE-415. The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 3.8.0 eliminates this vulnerability.(CVE-2025-5914)</p> <p>A vulnerability was found in libarchive up to 3.7.x (File Compression Software). It has been declared as critical.The CWE definition for the vulnerability is CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 3.8.0 eliminates this vulnerability.(CVE-2025-5915)</p> <p>A vulnerability was found in libarchive up to 3.7.x (File Compression Software). It has been rated as critical.Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an…</p> https://cve.radiocsirt.org/vuln/oesa-2025-1623 https://cve.radiocsirt.org/vuln/suse-su-2025:02718-1 <p>Security update for libarchive</p> <p>Security update for libarchive</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02718-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5915 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive, Ubuntu:25.10: libarchive</p> <p>A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive, Ubuntu:25.10: libarchive</p> <p>A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-5915