Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-48957

execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

Published

2024-10-10T02:15:02.990

Last Modified

2025-09-29T21:35:07.130

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
CWE-125
Type: Secondary
CWE-125

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	libarchive	libarchive	< 3.7.5	Yes

References

https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5 Patch ([email protected])
https://github.com/libarchive/libarchive/pull/2149 Patch ([email protected])
https://github.com/terrynini/CVE-Reports/blob/main/CVE-2024-48957/README.md Exploit, Third Party Advisory ([email protected])