CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. This bug affects libarchive versions prior to 3.8.0.
- Score
- CVSS 3.1 5.6 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2025-06-09
- Last modified
- 2026-09-01
- Weaknesses
- CWE-190
Affected products
- Libarchive (Libarchive)
- Enterprise Linux (Redhat)
- Openshift (Redhat)
- Openshift Container Platform (Redhat)
References
- https://access.redhat.com/security/cve/CVE-2025-5916
- https://bugzilla.redhat.com/show_bug.cgi?id=2370872
- https://github.com/libarchive/libarchive/pull/2568
- https://github.com/libarchive/libarchive/releases/tag/v3.8.0
