CVE-2026-15028

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description A flaw in the parsing of a PAX extended header allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue specifically occurs when processing a malformed SUN.holesdata sparse-file attribute. This could result in a denial of service or potentially allow for arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.