VULNERABILITY INTELLIGENCE

CVE-2025-5918

CVSS score3.9 LOW
EPSS probability0.38%
CISA KEVNot currently listed
Published2025-06-09
Last modified2026-09-01
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L

Description

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition.

Weakness classification

  • secalert@redhat.com: CWE-125

Primary references