CVE-2025-5914

HighCVSS 7.8/10Last modified Oct 12, 2026

Description

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2025
Last modified: Oct 12, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-591408.8backlash parses collected strings with escapes. On 8 September 2025, the npm publishing account for backslash was taken over after a phishin CVE-2025-591418.8simple-swizzle swizzles function arguments. On 8 September 2025, the npm publishing account for simple-swizzle was taken over after a phishi CVE-2025-591428.8color-string is a parser and generator for CSS color strings. On 8 September 2025, the npm publishing account for color-string was taken ove CVE-2025-591438.8color is a Javascript color conversion and manipulation library. On 8 September 2025, the npm publishing account for color was taken over af CVE-2025-591448.8debug is a JavaScript debugging utility. On 8 September 2025, the npm publishing account for debug was taken over after a phishing attack. V CVE-2025-591458.8color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over after a phishing att CVE-2025-591468.5New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. An authenticated Server-Side Reques CVE-2025-591477.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versi CVE-2025-591487.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versi CVE-2025-591496.2Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In ve CVE-2025-59156.6A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter blo CVE-2025-591507.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Versi