CVE-2026-78322: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Red Hat Red Hat Enterprise Linux 6

This vulnerability in file-roller arises from unbounded string copying of file paths from 7z or RAR archive entries into a fixed-size stack buffer during progress-line parsing. When a malicious archive contains a file entry with an excessively long path, this triggers a stack buffer overflow, causing file-roller to crash and terminate. The flaw leads to denial of service but is difficult to exploit for arbitrary code execution on hardened Red Hat systems. Exploitation requires a victim to open or extract the crafted archive using file-roller.

The vulnerability causes denial of service by crashing file-roller when processing specially crafted 7z or RAR archives with long file paths. There is no impact on confidentiality or integrity. The availability of the file-roller application is affected, potentially disrupting archive extraction operations. Exploitation requires user interaction and is limited to denial of service; arbitrary code execution is considered difficult on hardened systems.

Avoid opening or extracting untrusted 7z or RAR archives with file-roller until an updated package is installed. Patch status is not yet confirmed—check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-78322 for current remediation guidance. No official fix is explicitly stated in the advisory content provided. Users should exercise caution with untrusted archives to prevent denial of service.