CVE-2024-48957

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.7.5

Description The issue is related to out-of-bounds access in the execute filter audio function within the archive read support format rar.c component of the libarchive library. This can be exploited via a crafted archive file, allowing an attacker to access confidential data, compromise data integrity, and potentially cause a denial of service. The vulnerability is triggered because the src can move beyond the dst buffer.

Recommendations For libarchive versions prior to 3.7.5, update to version 3.7.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the execute filter audio function in archive read support format rar.c until a patch is available.