Report: CVE-2026-4424 - Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar...

Report: CVE-2026-4424 - Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar...

CVE ID :CVE-2026-4424 Published : March 19, 2026, 3:16 p.m. | 24 minutes ago Description :A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 19, 2026