PT-2025-24559 · Unknown+12 · Libarchive+12

Carnil · CVE-2025-5914 · Published 2025-05-20 · Updated 2026-07-27

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description A flaw has been identified in the libarchive library, specifically within the archive read format rar seek data() function, involving an integer overflow that can lead to a double-free condition. This can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Double Free

Integer Overflow

Weakness Enumeration

CWE-415

CWE-190

Related Identifiers

ALSA-2025:14130

ALSA-2025:14135

ALSA-2025:14137

ALT-PU-2025-9166

AZL-63783

AZL-63860

BDU:2025-10932

CESA-2025_14135

CVE-2025-5914

DLA-4368-1

ECHO-B835-DA71-C05C

FREEBSD-SA-25_07

INFSA-2025_14130

INFSA-2025_14135

JLSEC-2025-245

MGASA-2025-0200

OESA-2025-1623

OESA-2025-1624

OESA-2025-1656

OESA-2025-1657

OESA-2025-1658

RHSA-2025:14130

RHSA-2025:14135

RHSA-2025:14137

RHSA-2025:14141

RHSA-2025:14142

RHSA-2025:14525

RHSA-2025:14528

RHSA-2025:14808

RHSA-2025:14810

RHSA-2025:14828

RHSA-2025:15024

RHSA-2025_14130

RHSA-2025_14135

SUSE-SU-2025:02522-1

SUSE-SU-2025:02522-2

SUSE-SU-2025:02566-1

SUSE-SU-2025:02718-1

SUSE-SU-2025:02718-2

SUSE-SU-2025:20560-1

SUSE-SU-2025:20594-1

SUSE-SU-2025_02522-1

SUSE-SU-2025_02522-2

SUSE-SU-2025_02566-1

SUSE-SU-2025_02718-2

USN-7601-1

USN-8147-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Freebsd

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Libarchive

References · 169

• 🔥 https://github.com/libarchive/libarchive/pull/2598 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5914.json · Exploit
• https://access.redhat.com/errata/RHSA-2025:21885 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:19041 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:15827 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19221 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-20696 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0200 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:0934 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2025-14137.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-7601-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5917 · Security Note
• https://access.redhat.com/errata/RHSA-2025:15828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-60753 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:21913 · Vendor Advisory