CVE-2026-4111

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description A flaw exists in the RAR5 archive decompression logic within the archive read data() processing path of the libarchive library. Processing a specially crafted RAR5 archive can cause the decompression routine to enter a state preventing progress, resulting in an infinite loop that continuously consumes CPU resources. The archive appears structurally valid and passes checksum validation, making detection difficult for affected applications before processing. This can lead to persistent denial-of-service conditions in services that automatically process archives.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.