Threats tagged 'ghsa-2vwv-vqpv-v8vc'

A critical integer overflow vulnerability (CVE-2026-5121) exists in libarchive's zisofs block pointer allocation logic on 32-bit systems. This flaw can be exploited remotely by providing a specially crafted ISO9660 image, potentially leading to a heap buffer overflow and arbitrary code execution. The vulnerability affects all versions of libarchive. Red Hat has issued security advisories and updates to address this issue in their Enterprise Linux 9 distribution.