CVE-2025-5914

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Affected products

Alt Linux, Almalinux, Astra Linux, Centos, Debian, Freebsd, Linuxmint, Red Hat

Libarchive

< 3.8.0

CVSS 3.1

7.8 HIGH

EPSS

0.3% (27th percentile)

Weakness

CWE-190

NVD status

Modified

Published

2025-06-09