CVE-2026-4426: Libarchive: libarchive: denial of service via malformed iso file processing
A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (pzlog2bs) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition.
Other sources
An Undefined Behavior vulnerability exists in the zisofs decompression logic of the libarchive library. The flaw is caused by improper validation of the pzlog2bs field, which is directly read from ISO9660 Rock Ridge extensions and used as a shift exponent in arithmetic operations. When a specially crafted ISO file provides an out-of-range value (e.g., ≥64 on 64-bit systems), it triggers undefined behavior due to invalid shift operations, leading to incorrect memory allocation and potential crashes. This vulnerability can be exploited by supplying a malicious ISO file, resulting in denial-of-service conditions in applications that process ISO images.
— Red Hat
Libarchive: libarchive: denial of service via malformed iso file processing
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4426?
CVE-2026-4426 has been categorized as a denial of service vulnerability.
How do I fix CVE-2026-4426?
To fix CVE-2026-4426, you should update libarchive to the latest version that contains the security patch.
What types of systems are affected by CVE-2026-4426?
CVE-2026-4426 affects systems utilizing libarchive for processing ISO files, particularly those that handle Rock Ridge extensions.
What are the potential impacts of CVE-2026-4426?
The potential impacts of CVE-2026-4426 include application crashes and denial of service when processing malformed ISO files.
How does CVE-2026-4426 exploit the libarchive library?
CVE-2026-4426 exploits undefined behavior in zisofs decompression logic due to improper validation of specific fields.