CVE-2026-4424 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sli…
High CVSS: 7.5

CVE-2026-4424

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
Vendor
-
Product
-
CWE
CWE-125
Yayın Tarihi
2026-03-19 15:16:28
Güncelleme
2026-03-20 13:39:46
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

Referanslar