A use-after-free vulnerability in libarchive's archive_entry_copy_mac_metadata() function can lead to denial of service or potential information disclosure. The flaw occurs because an internal buffer is deallocated before data copying completes, allowing attackers supplying crafted input to crash the application or read uninitialized memory. This affects versions prior to 3.7.1-14.oe2403sp4. A patch is available to address this issue.