CVE-2026-4424
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Published Mar 19, 2026 · updated Oct 14, 2026 · libarchive libarchive
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
Timeline
Detection, updates, and resolution for this record.
Mar 19, 2026 · Catalog
Detected
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication
Oct 14, 2026 · Catalog
Updated
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication
Affected
- cpe libarchive/libarchiveversion unspecified
- cpe redhat/enterprise linux6.0
- cpe redhat/enterprise linux7.0
- cpe redhat/hardened imagesversion unspecified
- cpe redhat/openshift container platform4.0
- cpe redhat/openshift container platform4.16
- cpe redhat/openshift container platform for arm644.16
- cpe redhat/openshift container platform for power4.16
- vendor Red Hat Red Hat Enterprise Linux 10version unspecified
- vendor Red Hat Red Hat Enterprise Linux 10.0 Extended Update Supportversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Supportversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 8version unspecified
- vendor Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Supportversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-4424
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specia
vulnerability.circl.lu - CVE.orgCVE-2026-4424
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-4424
30-day exploitation probability 1.1%
first.org - NIST NVDCVE-2026-4424
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specia
nvd.nist.gov