CVE-2025-5914
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
Reserved 2025-06-09 | Published 2025-06-09 | Updated 2025-06-09 | Assigner redhat| 2025-06-06: | Reported to Red Hat. |
| 2025-05-20: | Made public. |
access.redhat.com/security/cve/CVE-2025-5914
bugzilla.redhat.com/show_bug.cgi?id=2370861 (RHBZ#2370861)
github.com/libarchive/libarchive/pull/2598
github.com/libarchive/libarchive/releases/tag/v3.8.0
Support options
