Unknown · Libarchive · CVE-2025-25724
**Name of the Vulnerable Software and Affected Versions**
libarchive versions prior to 3.7.8
**Description**
The issue is related to the `list item verbose` function in `tar/util.c`, which does not check the return value of `strftime`. This can lead to a denial of service or other unspecified impact when a crafted TAR archive is read with a verbose value of 2. The problem may occur due to insufficient buffer size, such as the 100-byte buffer, for custom locales.
**Recommendations**
For versions prior to 3.7.8, update to version 3.7.8 or later to resolve the issue.