https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:39:05 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-4426 <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:25: libarchive, Alpaquita:stream: libarchive</p> <p><strong>Affected:</strong> Alpaquita:23: libarchive, Alpaquita:25: libarchive, Alpaquita:stream: libarchive</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-4426 https://cve.radiocsirt.org/vuln/euvd-2026-362245 EUVD-2026-362245 https://cve.radiocsirt.org/vuln/euvd-2026-362245 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4426 <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.</p> <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4426 https://cve.radiocsirt.org/vuln/ghsa-r3fp-vrpw-pg77 <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.</p> <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.</p> https://cve.radiocsirt.org/vuln/ghsa-r3fp-vrpw-pg77 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4426 msrc_CVE-2026-4426 https://cve.radiocsirt.org/vuln/msrc_cve-2026-4426 https://cve.radiocsirt.org/vuln/oesa-2026-1940 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.(CVE-2026-4426)</p> <p>A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.(CVE-2026-5121)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libarchive</p> <p>is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security Fix(es):</p> <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.(CVE-2026-4426)</p> <p>A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.(CVE-2026-5121)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1940 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20797-1 <p>Security update for libarchive</p> <p>Security update for libarchive</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:20797-1 https://cve.radiocsirt.org/vuln/rhsa-2026:8944 <p>libarchive: bsdtar hangs and OOMs with zero-length pattern matches libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing libarchive: libarchive: Denial of Service via malformed ISO file processing libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing libarchive: A NULL pointer dereference vulnerability exists in the ACL parser of libarchive</p> <p>libarchive: bsdtar hangs and OOMs with zero-length pattern matches libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing libarchive: libarchive: Denial of Service via malformed ISO file processing libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing libarchive: A NULL pointer dereference vulnerability exists in the ACL parser of libarchive</p> https://cve.radiocsirt.org/vuln/rhsa-2026:8944 https://cve.radiocsirt.org/vuln/suse-su-2026:21757-1 <p>Security update for libarchive</p> <p>Security update for libarchive</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21757-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4426 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libarchive, Ubuntu:Pro:16.04:LTS: libarchive, Ubuntu:Pro:18.04:LTS: libarchive, Ubuntu:Pro:20.04:LTS: libarchive, Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive, Ubuntu:25.10: libarchive, Ubuntu:26.04:LTS: libarchive</p> <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libarchive, Ubuntu:Pro:16.04:LTS: libarchive, Ubuntu:Pro:18.04:LTS: libarchive, Ubuntu:Pro:20.04:LTS: libarchive, Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive, Ubuntu:25.10: libarchive, Ubuntu:26.04:LTS: libarchive</p> <p>A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-4426 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0803 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libarchive ausnutzen, um Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libarchive ausnutzen, um Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0803