GHSA-xq96-f7x8-gfx3HighCVSS 7.5
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a...
🔗 CVE IDs covered (1)
📋 Description
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.
🔗 References (57)
- https://nvd.nist.gov/vuln/detail/CVE-2026-14164
- https://github.com/libarchive/libarchive/issues/3069
- https://github.com/libarchive/libarchive/pull/3071
- https://access.redhat.com/security/cve/CVE-2026-14164
- https://bugzilla.redhat.com/show_bug.cgi?id=2493411
- https://access.redhat.com/errata/RHSA-2026:30333
- https://access.redhat.com/errata/RHSA-2026:52674
- https://access.redhat.com/errata/RHSA-2026:52675
- https://access.redhat.com/errata/RHSA-2026:54387
- https://access.redhat.com/errata/RHSA-2026:54760
- https://access.redhat.com/errata/RHSA-2026:54769
- https://access.redhat.com/errata/RHSA-2026:56954
- https://access.redhat.com/errata/RHSA-2026:58573
- https://access.redhat.com/errata/RHSA-2026:58574
- https://access.redhat.com/errata/RHSA-2026:58558
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:61783
- https://access.redhat.com/errata/RHSA-2026:63100
- https://access.redhat.com/errata/RHSA-2026:63041
- https://access.redhat.com/errata/RHSA-2026:63044
- https://access.redhat.com/errata/RHSA-2026:62409
- https://access.redhat.com/errata/RHSA-2026:65851
- https://access.redhat.com/errata/RHSA-2026:65839
- https://access.redhat.com/errata/RHSA-2026:67935
- https://access.redhat.com/errata/RHSA-2026:67857
- https://access.redhat.com/errata/RHSA-2026:72395
- https://access.redhat.com/errata/RHSA-2026:72394
- https://access.redhat.com/errata/RHSA-2026:72399
- https://access.redhat.com/errata/RHSA-2026:72476
- https://access.redhat.com/errata/RHSA-2026:72475
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461
- https://access.redhat.com/errata/RHSA-2026:74462
- https://access.redhat.com/errata/RHSA-2026:74463
- https://access.redhat.com/errata/RHSA-2026:70586
- https://access.redhat.com/errata/RHSA-2026:70615
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:82061
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82336
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82371
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://github.com/advisories/GHSA-xq96-f7x8-gfx3