Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-5121

Опубликовано: 30 мар. 2026
Источник: nvd
CVSS3: 7.5
CVSS3: 9.8
EPSS Низкий

Описание

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libarchive:libarchive:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.01073
Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-190
CWE-190

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

CVSS3: 7.5
redhat
4 месяца назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

CVSS3: 8.6
msrc
4 месяца назад

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

CVSS3: 7.5
debian
4 месяца назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow ...

CVSS3: 9.8
github
4 месяца назад

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

EPSS

Процентиль: 61%
0.01073
Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-190
CWE-190