← Back

CVE-2026-5121

nvd nist
Published: Mar 30, 2026Modified: Jul 14, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

Affected (8)

1 product
Libarchive
3 products
Enterprise Linux
Hardened Images
Openshift Container Platform
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Redhat
Version 10.0
Version 6.0
Version 7.0
Version 8.0
Version 9.0
All versions
Version 4.0

References (37)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingPatch
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.