Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-48958

execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

Published

2024-10-10T02:15:03.057

Last Modified

2025-11-03T21:16:31.263

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
CWE-125
Type: Secondary
CWE-125

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	libarchive	libarchive	< 3.7.5	Yes

References

https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5 Patch ([email protected])
https://github.com/libarchive/libarchive/pull/2148 Patch ([email protected])
https://github.com/terrynini/CVE-Reports/tree/main/CVE-2024-48958 Exploit, Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2025/Apr/11 (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2025/Apr/12 (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2025/Apr/13 (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2025/Apr/4 (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2025/Apr/8 (af854a3a-2127-422b-91ae-364da2661108)