CVE-2025-5918
LOWCVSS v3.1: 3.9 · EPSS: 0.0033 (25.0 percentile)
Source data as of:
At a glance
- Severity
- LOW
- CVSS
- 3.9 v3.1 · NVD
- EPSS
- 0.0033 (25.0 percentile) · FIRST.org
- CISA KEV
- No
- Type
- Out-of-bounds Read · NVD CWE
- Attack conditions (CVSS vector)
- · Source: NVD Vector
- Affected vendors
- libarchive, redhat
- Published
- 2025-06-09 · Modified: 2026-06-25
- References
- Jump to references (4)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.