VDB
RHSA-2025:16524
RHSA-2025:16524
PUBLISHED
CVSS 7.800000190734863 HIGH
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/discovery/discovery-ui-rhel9@sha256:def60eacc396cb99e19746aa7afb3af1aa56da9fd9bba87262ad2d01a5f24a9d_amd64 as a component of Red Hat Discovery 2 | * |
| Red Hat | registry.redhat.io/discovery/discovery-server-rhel9@sha256:c85cfbcaf7888885e57596b7b8bde3894718cfc33326499b24961a66a62cf083_arm64 as a component of Red Hat Discovery 2 | * |
| Red Hat | registry.redhat.io/discovery/discovery-server-rhel9@sha256:1c67d8d526ab4f2854947f7dccd8752a2efd414c0f1cbab17706fa91147e7cda_amd64 as a component of Red Hat Discovery 2 | * |
| Red Hat | registry.redhat.io/discovery/discovery-ui-rhel9@sha256:87fd07b40ae5dc04d446b4b44a846aeb898e56c627e917d0c0675e7905f42a02_arm64 as a component of Red Hat Discovery 2 | * |
Timeline
- Sep 23, 2025 CVE Published
- Aug 2, 2026 CVE Updated
- Aug 2, 2026 Distribution Patch
- Aug 2, 2026 Distribution Patch
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:16524 advisory
- https://access.redhat.com/security/cve/CVE-2025-5914 advisory
- https://access.redhat.com/security/cve/CVE-2025-6020 advisory
- https://access.redhat.com/security/cve/CVE-2025-8194 advisory
- https://access.redhat.com/security/cve/CVE-2025-8941 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16524.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2370861 issue
- https://www.cve.org/CVERecord?id=CVE-2025-5914 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-5914 advisory
- https://github.com/libarchive/libarchive/pull/2598 advisory
- https://github.com/libarchive/libarchive/releases/tag/v3.8.0 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2372512 issue
- https://www.cve.org/CVERecord?id=CVE-2025-6020 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-6020 advisory
- https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2384043 issue
- https://www.cve.org/CVERecord?id=CVE-2025-8194 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-8194 advisory
…and 6 more