← back
CVE-2024-26256

Libarchive Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 87.8%CWE-122
In short

Libarchive, a library used to extract files from compressed archives, has a vulnerability that allows attackers to run malicious code on your computer by crafting a specially designed archive file. When you extract this malicious archive, the attacker's code executes with the same privileges as your application.

Technical detail

A buffer overflow vulnerability (CWE-122) in libarchive's archive extraction routine allows remote code execution when processing specially crafted archive files. The attack vector requires user interaction to extract a malicious archive; successful exploitation grants arbitrary code execution in the context of the vulnerable application.

Summary generated and translated by AI from the official description.
Libarchive Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →