CVE-2025-5914
High
Description
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Libarchive
PublishedJun 9, 2025
First seenJun 9, 2025
Weakness typeCWE-190Integer overflow
How to fix
Update
- libarchive libarchive3.8.0 or later
Vendor advisories
- github.com/libarchive/libarchive/releases/tag/v3.8.0
- access.redhat.com/errata/RHSA-2025:14130
- access.redhat.com/errata/RHSA-2025:14135
- access.redhat.com/errata/RHSA-2025:14137
- access.redhat.com/errata/RHSA-2025:14141
- access.redhat.com/errata/RHSA-2025:14142
- access.redhat.com/errata/RHSA-2025:14525
- access.redhat.com/errata/RHSA-2025:14528
- access.redhat.com/errata/RHSA-2025:14594
- access.redhat.com/errata/RHSA-2025:14644
- access.redhat.com/errata/RHSA-2025:14808
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libarchive libarchive | v < 3.8.0 | 3.8.0 |
| redhat openshift_container_platform | 4.0 | — |
| redhat enterprise_linux | 6.0, 7.0, 8.0, 9.0, 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.