CVE-2026-4424

HighCVSS 7.5/10Last modified Nov 4, 2026

Description

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
Red HatRed Hat Enterprise Linux 10—
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—
Red HatRed Hat OpenShift Container Platform 4.12—
Red HatRed Hat OpenShift Container Platform 4.13—
Red HatRed Hat OpenShift Container Platform 4.14—
Red HatRed Hat OpenShift Container Platform 4.15—
Red HatRed Hat OpenShift Container Platform 4.16—
Red HatRed Hat OpenShift Container Platform 4.17—
Red HatRed Hat OpenShift Container Platform 4.18—
Red HatRed Hat OpenShift Container Platform 4.19—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatRHEL-8 based Middleware Containers—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.20—
Red HatRed Hat AI Inference Server 3.2—
Red HatRed Hat AI Inference Server 3.2—
Red HatRed Hat AI Inference Server 3.2—
Red HatRed Hat AI Inference Server 3.3—
Red HatRed Hat AI Inference Server 3.3—
Red HatRed Hat AI Inference Server 3.3—
Red HatRed Hat AI Inference Server 3.3—

References

Timeline

Published
Mar 19, 2026
Last modified
Nov 4, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-442407.5basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-chCVE-2026-442417.5Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. From 4.3.0 to CVE-2026-442423.7Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Prior to 4.10.CVE-2026-442437.1GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackersCVE-2026-442447.8GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to CVE-2026-442456.1Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-dCVE-2026-442467.2nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage wCVE-2026-442477.4Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce CVE-2026-442487.5Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties CVE-2026-442498.1Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final aCVE-2026-442507.5Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.FinCVE-2026-442516.5Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5,
CVE-2026-4424: High severity, CVSS 7.5 | Vulnix