CVE-2025-5914
Severity
7.8HIGH
EPSS
0.1%
top 69.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 9
Latest updateApr 2
Description
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
Also affects: Enterprise Linux 10.0, 6.0, 7.0, 8.0, 9.0, Openshift Container Platform 4.0
Patches
🔴Vulnerability Details
4CVEList▶
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c↗2025-06-09
OSV▶
CVE-2025-5914: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function↗2025-06-09
GHSA▶
GHSA-7376-x4rm-3v8x: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function↗2025-06-09