Threats tagged 'ghsa-r3fp-vrpw-pg77'

CVE-2026-4426 is an undefined behavior vulnerability in libarchive's zisofs decompression logic caused by improper validation of a field read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file, potentially causing incorrect memory allocation and application crashes leading to denial-of-service (DoS). Red Hat has issued an update to address this issue in their Hardened Images RPMs.