← CVE Intelligence

CVE-2025-11579

DoS via Out Of Memory Crash PUBLISHED

Description (CNA)

github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.

Affected (CNA)

Vendor / productVersions
nwaples / rardecodeaffected 2.0.1 through 2.1.1; unaffected 2.2.0

CWE

CWE-789

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.