PT-2026-28808

CVE-2026-5121

·

Published

2026-01-01

·

Updated

2026-10-16

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)
Description An integer overflow exists in the zisofs block pointer allocation logic on 32-bit systems. A remote attacker can exploit this by providing a specially crafted ISO9660 image, potentially leading to a heap buffer overflow and arbitrary code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:8510
ALSA-2026:8534
AZL-81504
CLSA-2026-1782303221
CLSA-2026-1787908647
CLSA-2026-1792167585
ECHO-FE78-E324-D857
OESA-2026-1940
OESA-2026-1941
OESA-2026-1942
OESA-2026-1943
OESA-2026-1944
OESA-2026-1945
RHSA-2026:8510
RHSA-2026:8517
RHSA-2026:8521
RHSA-2026:8534
RHSA-2026:8864
RHSA-2026:8866
RHSA-2026:8867
RHSA-2026:8873
RHSA-2026:8908
RHSA-2026:8944
RHSA-2026:9026
RHSA-2026:9592
SUSE-SU-2026:22241-1
SUSE-SU-2026:22248-1
SUSE-SU-2026:2490-1
SUSE-SU-2026:2599-1
SUSE-SU-2026:2747-1
USN-8292-1
Found an issue in the description? Have something to add? Feel free to write us 👾