CVE-2025-25724

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.7.8

Description The issue is related to the list item verbose function in tar/util.c, which does not check the return value of strftime. This can lead to a denial of service or other unspecified impact when a crafted TAR archive is read with a verbose value of 2. The problem may occur due to insufficient buffer size, such as the 100-byte buffer, for custom locales.

Recommendations For versions prior to 3.7.8, update to version 3.7.8 or later to resolve the issue.