Vulnerability · Published Jun 9, 2025 · Assigned by redhat
CVE-2025-5915Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
Medium 6.6
In plain English
A medium-severity heap buffer overflow in libarchive. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libarchive | 3.6.2-1+deb12u3 | DEBIAN-CVE-2025-5915 |
| Debian:13 | libarchive | 3.7.4-4 | DEBIAN-CVE-2025-5915 |
| Debian:14 | libarchive | 3.7.4-4 | DEBIAN-CVE-2025-5915 |
| Ubuntu:22.04:LTS | libarchive | 3.6.0-1ubuntu1.5 | USN-7601-1 |
| Ubuntu:22.04:LTS | libarchive | 3.6.0-1ubuntu1.5 | UBUNTU-CVE-2025-5915 |
| Ubuntu:24.04:LTS | libarchive | 3.7.2-2ubuntu0.5 | UBUNTU-CVE-2025-5915 |
| Ubuntu:24.04:LTS | libarchive | 3.7.2-2ubuntu0.5 | USN-7601-1 |
| Ubuntu:25.10 | libarchive | 3.7.7-0ubuntu3 | UBUNTU-CVE-2025-5915 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| libarchive | 0 – before 3.8.0 | |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
References
- https://access.redhat.com/security/cve/CVE-2025-5915 vdb-entry, x_refsource_REDHAT
- RHBZ#2370865 issue-tracking, x_refsource_REDHAT
- https://github.com/libarchive/libarchive/pull/2599
- https://github.com/libarchive/libarchive/releases/tag/v3.8.0