CVE-2026-4424 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
A remote attacker can disclose sensitive heap memory by providing a specially crafted RAR archive to applications using Libarchive.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-4424?
CVE-2026-4424 is a high-severity vulnerability in Libarchive Libarchive, published on 19 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
Weakness: CWE-125
Which versions are affected by CVE-2026-4424?
It affects 7 products.
Linux distribution packages (13)
bsdtar AlmaLinux:10 | All versions | 3.7.7-8.el10_1 |
libarchive AlmaLinux:10 | All versions | 3.7.7-8.el10_1 |
libarchive-devel AlmaLinux:10 | All versions | 3.7.7-8.el10_1 |
bsdcat-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
bsdcpio-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
bsdtar Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
bsdtar-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
bsdunzip-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
libarchive Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
libarchive-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
libarchive-debugsource Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
libarchive-devel Red Hat:enterprise_linux:10.1 | All versions | 0:3.7.7-8.el10_1 |
libarchive Rocky Linux:10 | All versions | 0:3.7.7-8.el10_1 |
Products include Libarchive Libarchive, Redhat Enterprise Linux, Redhat Enterprise Linux Server Aus, Redhat Hardened Images, Redhat Openshift Container Platform, Redhat Openshift Container Platform for Arm64 and 1 more.
How do I fix CVE-2026-4424?
Apply the vendor's patch.
Is CVE-2026-4424 being exploited?
There is no known exploitation of CVE-2026-4424 in the wild and no public exploit code.
Other vulnerabilities in Libarchive Libarchive
Sources
Also known as ALSA-2026:8492, AZL-80403, BELL-CVE-2026-4424, CLSA-2026-1776872469, CLSA-2026-1776873238, CLSA-2026-1780922803 and 8 more.