Libarchive Remote Code Execution Vulnerability
No sign of exploitation. No public exploitation artifact known so far.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Libarchive, a library used to extract files from compressed archives, has a vulnerability that allows attackers to run malicious code on your computer by crafting a specially designed archive file. When you extract this malicious archive, the attacker's code executes with the same privileges as your application.
A buffer overflow vulnerability (CWE-122) in libarchive's archive extraction routine allows remote code execution when processing specially crafted archive files. The attack vector requires user interaction to extract a malicious archive; successful exploitation grants arbitrary code execution in the context of the vulnerable application.