CVE-2025-5916
Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive.
Reserved 2025-06-09 | Published 2025-06-09 | Updated 2025-06-10 | Assigner redhatInteger Overflow or Wraparound
| 2025-06-06: | Reported to Red Hat. |
| 2025-05-20: | Made public. |
access.redhat.com/security/cve/CVE-2025-5916
bugzilla.redhat.com/show_bug.cgi?id=2370872 (RHBZ#2370872)
github.com/libarchive/libarchive/pull/2568
github.com/libarchive/libarchive/releases/tag/v3.8.0
Support options
