← CVE Intelligence

CVE-2026-14164

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() PUBLISHED

Description (CNA)

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:3.7.7-10.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:3.7.7-5.el10_0.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:3.5.3-11.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:3.5.3-11.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:3.5.3-5.el9_2.3 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:3.5.3-5.el9_4.2 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:3.5.3-7.el9_6.2 before *
Red Hat / Red Hat OpenShift Container Platform 4.13unaffected 413.92.202609080414-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 414.92.202609011250-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 415.92.202609140326-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 416.94.202609140240-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 417.94.202609191027-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 418.94.202609031320-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 418.94.202609171815-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.19unaffected 4.19.9.6.202609021231-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.20unaffected 4.20.9.6.202609021029-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.21unaffected 4.21.9.6.202609021100-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.22unaffected 4.22.9.8.202608130832-0 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371080 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371069 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791788287 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791378395 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791970484 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223279 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223719 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790272426 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589998 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589912 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589914 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589855 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790598593 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791427182 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791818357 before *
Red Hat / Red Hat Discovery 2unaffected 1786638573 before *
Red Hat / Red Hat Discovery 2unaffected 1788206196 before *
Red Hat / Red Hat Hardened Imagesunaffected 3.8.8-2.hum1 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276886 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276884 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790277045 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276889 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276974 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703497 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703506 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703590 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703568 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703586 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703494 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703542 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786435241 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533457 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533449 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786435483 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533529 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241211 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 8unaffected
Red Hat / Red Hat OpenShift Container Platform 4unaffected

CWE

CWE-415

References

ADP enrichment

CISA-ADP

No English description supplied.