PT-2025-24557

CVE-2025-5918

·

Published

2025-04-07

·

Updated

2026-09-01

Description by

CVSS 3.1
6.6
Medium
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)
Description A flaw exists in the libarchive library that occurs when file streams are piped into bsdtar. This leads to an out-of-bounds read, which is a condition where the program reads data past the end of the intended buffer. This can result in memory corruption, unpredictable program behavior, or a denial-of-service condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
AZL-63753
AZL-63780
AZL-63821
AZL-63851
DLA-4368-1
ECHO-52D0-6D58-7432
JLSEC-2025-249
OESA-2025-1623
OESA-2025-1624
OESA-2025-1656
OESA-2025-1657
OESA-2025-1658
SUSE-SU-2025:02566-1
SUSE-SU-2025_02566-1
SUSE-SU-2025:02718-1
SUSE-SU-2025:02718-2
SUSE-SU-2025_02718-2
SUSE-SU-2025:20560-1
SUSE-SU-2025:20594-1
USN-8147-1
Found an issue in the description? Have something to add? Feel free to write us 👾