Threat Intelligence Database

CVE-2025-60753 is a medium severity vulnerability in libarchive's bsdtar utility prior to version 3.8.1. It arises from improper handling of crafted -s substitution rules in the apply_substitution function, leading to unbounded memory allocation. This flaw can cause an Out-of-Memory (OOM) crash, resulting in a denial of service. Exploitation requires local access and user interaction, with no impact on confidentiality or integrity. No known exploits are currently in the wild. European organizations using vulnerable versions of bsdtar, especially in environments processing untrusted tar archives, may face service disruptions. Mitigation involves updating to libarchive 3.8.

MediumVulnerabilityGermanyFranceNetherlands+6#cve#cve-2025-60753

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

HighVulnerabilityGermanyFranceUnited Kingdom+6#cve#cve-2024-48958