PT-2025-41556 · Rardecode · Rardecode

Doyensec + 1 · Published 2025-10-10 · Updated 2026-05-23 · CVE-2025-11579

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions rardecode versions 2.1.1 and earlier

Description The software does not properly limit the dictionary size when processing RAR files. An attacker can exploit this by providing a specially crafted RAR file with a large dictionary size, leading to a Denial of Service due to an Out Of Memory crash.

Recommendations Update to a version newer than 2.1.1.

Fix

DoS

Missing Authentication

Weakness Enumeration

CWE-306

CWE-789

Related Identifiers

CLEANSTART-2026-BU65096

CLEANSTART-2026-ET12387

CLEANSTART-2026-FV86809

CLEANSTART-2026-GN78570

CLEANSTART-2026-JG72006

CLEANSTART-2026-NR54556

CLEANSTART-2026-UD70996

CLEANSTART-2026-VT65447

CVE-2025-11579

GHSA-RWVP-R38J-9RGG

GO-2025-4020

OPENSUSE-SU-2025:15710-1

OPENSUSE-SU-2025:15722-1

OPENSUSE-SU-2025:20160-1

OPENSUSE-SU-2026:10844-1

Affected Products

Rardecode

References · 201

• https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-11579 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27139 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-26958 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-UD70996 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15722-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33762 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32282 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-41506 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-30153 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33810 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-VT65447 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34040 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11579 · Vendor Advisory