CVE-2025-5914
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - secalert@redhat.com
- Published
- 2025-06-09
- Last modified
- 2026-10-12
- Weaknesses
- CWE-190
Affected products
- Libarchive (Libarchive)
- Cert Manager (Redhat)
- Confidential Compute Attestation (Redhat)
- Discovery (Redhat)
- Enterprise Linux (Redhat)
- Insights Proxy (Redhat)
- Openshift (Redhat)
- Openshift Compliance Operator (Redhat)
- Openshift Container Platform (Redhat)
- Openshift Distributed Tracing (Redhat)
- Openshift File Integrity Operator (Redhat)
- Openshift Serverless (Redhat)
- Rhel Aus (Redhat)
- Rhel E4s (Redhat)
- Rhel Els (Redhat)
- Rhel Eus (Redhat)
- Rhel Eus Long Life (Redhat)
- Rhel Tus (Redhat)
- Webterminal (Redhat)
- Sidis Secured Smartplug (Siemens)
References
- https://access.redhat.com/errata/RHSA-2025:14130
- https://access.redhat.com/errata/RHSA-2025:14135
- https://access.redhat.com/errata/RHSA-2025:14137
- https://access.redhat.com/errata/RHSA-2025:14141
- https://access.redhat.com/errata/RHSA-2025:14142
- https://access.redhat.com/errata/RHSA-2025:14525
- https://access.redhat.com/errata/RHSA-2025:14528
- https://access.redhat.com/errata/RHSA-2025:14594
- https://access.redhat.com/errata/RHSA-2025:14644
- https://access.redhat.com/errata/RHSA-2025:14808
- https://access.redhat.com/errata/RHSA-2025:14810
- https://access.redhat.com/errata/RHSA-2025:14828
- https://access.redhat.com/errata/RHSA-2025:15024
- https://access.redhat.com/errata/RHSA-2025:15397
- https://access.redhat.com/errata/RHSA-2025:15709
- https://access.redhat.com/errata/RHSA-2025:15827
- https://access.redhat.com/errata/RHSA-2025:15828
- https://access.redhat.com/errata/RHSA-2025:16524
- https://access.redhat.com/errata/RHSA-2025:18217
- https://access.redhat.com/errata/RHSA-2025:18218
- https://access.redhat.com/errata/RHSA-2025:18219
- https://access.redhat.com/errata/RHSA-2025:19041
- https://access.redhat.com/errata/RHSA-2025:19046
- https://access.redhat.com/errata/RHSA-2025:21885
- https://access.redhat.com/errata/RHSA-2025:21913
- https://access.redhat.com/errata/RHSA-2026:0326
- https://access.redhat.com/errata/RHSA-2026:0934
- https://access.redhat.com/errata/RHSA-2026:1541
- https://access.redhat.com/security/cve/CVE-2025-5914
- https://bugzilla.redhat.com/show_bug.cgi?id=2370861