Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-5121

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

  • openshift/ose-rhel-coreos-8

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • rhpam-7/rhpam-businesscentral-monitoring-rhel8

    Version range not reported

  • rhpam-7/rhpam-businesscentral-rhel8

    Version range not reported

  • rhpam-7/rhpam-controller-rhel8

    Version range not reported

  • rhpam-7/rhpam-dashbuilder-rhel8

    Version range not reported

  • rhpam-7/rhpam-kieserver-rhel8

    Version range not reported

  • rhpam-7/rhpam-process-migration-rhel8

    Version range not reported

  • rhpam-7/rhpam-smartrouter-rhel8

    Version range not reported

  • cert-manager/jetstack-cert-manager-acmesolver-rhel9

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-bundle

    Version range not reported

  • cert-manager/jetstack-cert-manager-acmesolver-rhel9

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • cert-manager/cert-manager-istio-csr-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-bundle

    Version range not reported

  • cert-manager/cert-manager-trust-manager-rhel9

    Version range not reported

  • rhaiis/vllm-cuda-rhel9

    Version range not reported

  • rhaiis/vllm-rocm-rhel9

    Version range not reported

  • rhaiis/model-opt-cuda-rhel9

    Version range not reported

  • rhaiis/model-opt-cuda-rhel9

    Version range not reported

  • rhaiis/vllm-rocm-rhel9

    Version range not reported

  • rhaiis/vllm-cuda-rhel9

    Version range not reported

  • rhaiis/vllm-spyre-rhel9

    Version range not reported

  • discovery/discovery-ui-rhel9

    Version range not reported

  • libarchive-main

    Version range not reported

  • insights-proxy/insights-proxy-container-rhel9

    Version range not reported

  • rhui5/cds-rhel9

    Version range not reported

  • rhui5/haproxy-rhel9

    Version range not reported

  • rhui5/installer-rhel9

    Version range not reported

  • rhui5/rhua-rhel9

    Version range not reported

  • rhui5/cds-kubernetes-tp-rhel9

    Version range not reported

  • rhui5/installer-tp-rhel9

    Version range not reported

  • rhui5/rhua-tp-rhel9

    Version range not reported

  • libarchive

    Version range not reported

  • libarchive

    Version range not reported

References 25

access.redhat.com