A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT…
Low CVSS 3.9
Summary
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. This bug affects libarchive …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://access.redhat.com/security/cve/CVE-2025-5916 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2370872 Issue Tracking
- https://github.com/libarchive/libarchive/pull/2568 Patch
- https://github.com/libarchive/libarchive/releases/tag/v3.8.0 Release Notes
Timeline
- nvd_ingest NVD