Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-5121

Опубликовано: 30 мар. 2026
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

EPSS

Процентиль: 47%
0.00243
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
ubuntu
9 дней назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

redhat
9 дней назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

msrc
6 дней назад

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

CVSS3: 9.8
debian
9 дней назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow ...

CVSS3: 9.8
github
9 дней назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

EPSS

Процентиль: 47%
0.00243
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190