REDHAT-BUG-2493411: Medium severity Libarchive libarchive vulnerability

Published Jun 26, 2026
·
Updated

A double-free vulnerability exists in the libarchive RAR5 reader subsystem within archivereadsupportformatrar5.c where the state tracking pointer rar->cstate.filteredbuf can be linked to a temporary filter output block during archive decompression. When the unpacking engine subsequently processes an adjacent file or resets its internal state layout via initunpack(), it releases the allocation mapped to filteredbuf but fails to clear or nullify the underlying pointer variable. A specially crafted RAR5 archive can exploit this lingering dangling pointer by forcing a secondary release operation on the exact same memory address, triggering a standard memory-manager abort that immediately crashes the application and results in a Denial of Service (DoS).

Affected Software

1 affected component
Libarchive libarchive

Event History

Jun 26, 2026
Data Sourced
via Red Hat·01:02 PM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2493411?

The severity of REDHAT-BUG-2493411 is medium, classified as 4.

2

How do I fix REDHAT-BUG-2493411?

To fix REDHAT-BUG-2493411, update libarchive to the latest version where the vulnerability has been addressed.

3

What causes the vulnerability in REDHAT-BUG-2493411?

The vulnerability in REDHAT-BUG-2493411 is caused by a double-free condition in the libarchive RAR5 reader subsystem.

4

What impact does REDHAT-BUG-2493411 have on my system?

REDHAT-BUG-2493411 can potentially lead to memory corruption and may allow an attacker to execute arbitrary code during archive decompression.

5

Is REDHAT-BUG-2493411 present in all versions of libarchive?

REDHAT-BUG-2493411 is specific to certain versions of libarchive; it's important to check the version you are using.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203