CVE-2025-5916

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5916
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive.

3.9 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.3 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/security/cve/CVE-2025-5916 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2370872 Issue Tracking
https://github.com/libarchive/libarchive/pull/2568 Patch
https://github.com/libarchive/libarchive/releases/tag/v3.8.0 Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
History

15 Aug 2025, 18:12

Type Values Removed Values Added
CPE cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
First Time Redhat enterprise Linux
Libarchive
Redhat openshift Container Platform
Libarchive libarchive
Redhat
References () https://access.redhat.com/security/cve/CVE-2025-5916 - () https://access.redhat.com/security/cve/CVE-2025-5916 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2370872 - () https://bugzilla.redhat.com/show_bug.cgi?id=2370872 - Issue Tracking
References () https://github.com/libarchive/libarchive/pull/2568 - () https://github.com/libarchive/libarchive/pull/2568 - Patch
References () https://github.com/libarchive/libarchive/releases/tag/v3.8.0 - () https://github.com/libarchive/libarchive/releases/tag/v3.8.0 - Release Notes

12 Jun 2025, 16:06

Type Values Removed Values Added
Summary
  • (es) Se ha identificado una vulnerabilidad en la librería libarchive. Esta falla implica un desbordamiento de enteros que puede activarse al procesar un archivo WARC (Web Archive) que afirma tener más de INT64_MAX (4 bytes de contenido). Un atacante podría crear un archivo WARC malicioso para inducir este desbordamiento, lo que podría provocar un comportamiento impredecible del programa, corrupción de memoria o una denegación de servicio en las aplicaciones que procesan dichos archivos con libarchive.

09 Jun 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-09 20:15

Updated : 2025-08-15 18:12

NVD link : CVE-2025-5916

Mitre link : CVE-2025-5916

CVE.ORG link : CVE-2025-5916

JSON object : View

Products Affected

libarchive

  • libarchive

redhat

  • enterprise_linux
  • openshift_container_platform
CWE
CWE-190

Integer Overflow or Wraparound