CVE-2026-4424

Thursday, March 19, 2026

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.

Affected Software

Vendor	Product	Version Range	Status
Red Hat	Red Hat Enterprise Linux 10	`0:3.7.7-8.el10_1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	`0:3.7.7-5.el10_0 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	`0:3.1.2-14.el7_9.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:3.3.3-7.el8_10 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	`0:3.3.2-8.el8_2.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	`0:3.3.3-1.el8_4.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	`0:3.3.3-1.el8_4.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	`0:3.3.3-6.el8_6.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	`0:3.3.3-6.el8_6.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	`0:3.3.3-6.el8_6.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	`0:3.3.3-5.el8_8.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	`0:3.3.3-5.el8_8.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:3.5.3-9.el9_7 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:3.5.3-9.el9_7 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	`0:3.5.3-2.el9_0.4 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	`0:3.5.3-5.el9_2.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	`0:3.5.3-5.el9_4 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	`0:3.5.3-7.el9_6.1 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.12	`412.86.202604281506-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.13	`413.92.202605271328-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.14	`414.92.202605060243-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.15	`415.92.202605060220-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.16	`416.94.202604211449-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.17	`417.94.202605112123-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.18	`418.94.202604240015-0 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.19	`4.19.9.6.202605201155-0 < *`	unaffected
Red Hat	RHEL-8 based Middleware Containers	`7.13.5-4.1777325677 < *`	unaffected
Red Hat	RHEL-8 based Middleware Containers	`7.13.5-4.1777325711 < *`	unaffected
Red Hat	RHEL-8 based Middleware Containers	`7.13.5-4.1777325710 < *`	unaffected
Red Hat	RHEL-8 based Middleware Containers	`7.13.5-3.1777325680 < *`	unaffected
Red Hat	RHEL-8 based Middleware Containers	`7.13.5-4.1777325709 < *`	unaffected
Red Hat	RHEL-8 based Middleware Containers	`7.13.5-4.1777325680 < *`	unaffected
Red Hat	RHEL-8 based Middleware Containers	`7.13.5-4.1777325708 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1779223654 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1779223651 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1780681984 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.3	`1778244559 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.3	`1778244531 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.3	`1778274666 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.3	`1778244546 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1778101579 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1778156756 < *`	unaffected
Red Hat	Red Hat Hardened Images	`3.8.7-1.hum1 < *`	unaffected
Red Hat	Red Hat Insights proxy 1.5	`1776868961 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1776868774 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1776868744 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1776868772 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1776868842 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1777459441 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1777454300 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1777459504 < *`	unaffected

Weaknesses

CWE-125: Out-of-bounds Read

Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: yes
- Technical Impact: partial

libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing

Additional References

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.