A flaw was found in libarchive. (CVE-2026-5121)
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
AI Analysis
Technical Summary
An integer overflow vulnerability exists in libarchive's zisofs block pointer allocation logic on 32-bit systems. A remote attacker can exploit this by providing a specially crafted ISO9660 image, causing a heap buffer overflow that may allow arbitrary code execution. This vulnerability is tracked as CVE-2026-5121 with a CVSS 3.1 score of 9.8 (critical). Red Hat has released security updates for libarchive in Red Hat Enterprise Linux 9 to mitigate this issue.
Potential Impact
Successful exploitation of this vulnerability can lead to arbitrary code execution on affected 32-bit systems due to a heap buffer overflow triggered by processing malicious ISO9660 images. The CVSS score of 9.8 reflects high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Red Hat has released official security updates for libarchive in Red Hat Enterprise Linux 9 and related variants. Applying these vendor-provided patches is the recommended remediation. Users should consult Red Hat advisories RHSA-2026:8510 and RHSA-2026:10065 for detailed update instructions. No additional mitigation steps are indicated by the vendor.
A flaw was found in libarchive. (CVE-2026-5121)
Description
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
CVSS v3.1
Score 9.8critical
Affected software
pkg:github/libarchive/libarchiveRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An integer overflow vulnerability exists in libarchive's zisofs block pointer allocation logic on 32-bit systems. A remote attacker can exploit this by providing a specially crafted ISO9660 image, causing a heap buffer overflow that may allow arbitrary code execution. This vulnerability is tracked as CVE-2026-5121 with a CVSS 3.1 score of 9.8 (critical). Red Hat has released security updates for libarchive in Red Hat Enterprise Linux 9 to mitigate this issue.
Potential Impact
Successful exploitation of this vulnerability can lead to arbitrary code execution on affected 32-bit systems due to a heap buffer overflow triggered by processing malicious ISO9660 images. The CVSS score of 9.8 reflects high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Red Hat has released official security updates for libarchive in Red Hat Enterprise Linux 9 and related variants. Applying these vendor-provided patches is the recommended remediation. Users should consult Red Hat advisories RHSA-2026:8510 and RHSA-2026:10065 for detailed update instructions. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2vwv-vqpv-v8vc
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-5121"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
- State
- PUBLISHED
Patch Information
- https://access.redhat.com/errata/RHSA-2026:10065
- https://access.redhat.com/errata/RHSA-2026:8510
- https://access.redhat.com/errata/RHSA-2026:8517
- https://access.redhat.com/errata/RHSA-2026:8521
- https://access.redhat.com/errata/RHSA-2026:8534
- https://access.redhat.com/errata/RHSA-2026:8864
- https://access.redhat.com/errata/RHSA-2026:8866
- https://access.redhat.com/errata/RHSA-2026:8867
- https://access.redhat.com/errata/RHSA-2026:8873
- https://access.redhat.com/errata/RHSA-2026:8908
- https://access.redhat.com/errata/RHSA-2026:8944
- https://access.redhat.com/errata/RHSA-2026:9026
Threat ID: 6abb417cf7a7c54106cc2e46
Added to database: 09/29/2026, 04:41:32 UTC
Last enriched: 09/29/2026, 04:43:50 UTC
Last updated: 09/29/2026, 18:11:19 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.