Moderate Vulnerability in libarchive: Double-Free Issue in RAR5 Decompression
Summary
RLSA-2026:52674: Moderate: libarchive security update. Affects libarchive versions < 0:3.5.3-11.el9_8. Fixed in 0:3.5.3-11.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libarchive is a versatile programming library capable of creating and reading various streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. It is widely utilized in utilities like bsdtar, scripting language bindings such as python-libarchive, and several popular desktop file managers. This library's extensive use makes it critical to maintain its security and integrity.
Vulnerability Detail
The vulnerability identified as CVE-2026-14164 is a double-free issue in the RAR5 decompression logic of libarchive. This flaw arises from a dangling pointer, filtered_buf, in the init_unpack() function. If exploited, this vulnerability could lead to application crashes or potentially allow an attacker to execute arbitrary code, thereby compromising the system's security.
How To Fix
Minimum fixed version
0:3.5.3-11.el9_8
This is the first release that contains the fix.
sudo dnf update libarchiveTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The libarchive library has a moderate vulnerability due to a double-free issue in its RAR5 decompression logic. Users are advised to update to the patched version to mitigate risks associated with this vulnerability. Regular monitoring for vulnerabilities is essential to maintain software security.
See every vulnerability recorded for libarchive →
FAQ
The CVSS score for this vulnerability is 7.5, indicating a moderate level of severity.
Exploitation of this vulnerability could lead to application crashes or allow attackers to execute arbitrary code.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without any signup.
While the primary risk is application instability and potential code execution, there could be indirect risks to data integrity depending on how the application is used.
It is recommended to regularly check for vulnerabilities, especially after updates or when new vulnerabilities are disclosed.
Related vulnerabilities
Recent vulnerabilities recorded for libarchive.
