Skip to main content

Heap-based Buffer Overflow

CVE-2025-5915

Medium
6.6/10

Summary

A vulnerability has been identified in the libarchive library versions prior to 3.8.0. This flaw can lead to a Heap-based Buffer Over-Read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (Denial-of-Service), or the disclosure of sensitive information from adjacent memory regions.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • REQUIRED
  • LOW
  • HIGH
  • HIGH

CWE-122 - Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

Advisory Timeline

  • Published