[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYh-FwlKDRoPWqFXR83GNWEAQcUT5lHg2JwU-fd8vqOw":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":78,"topProductsByCves":79,"seoMetadata":81,"meta":90},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},17568,"libarchive",1,70,0,51,"2025-06-09","l",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},103492,"Libarchive is a technology vendor with 1 tracked product and 70 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36,42,48,54,59,63,70,74],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2024-26256","Libarchive Remote Code Execution Vulnerability","2024-04-09",7.8,"v3.1","High",false,0.87896,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":35},"CVE-2015-8921","The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.","2016-09-20",7.5,"v3.0",0.11992,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":41},"CVE-2016-1541","Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive.","2016-05-07",8.8,0.10284,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":47},"CVE-2016-6250","Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow.","2016-09-21",8.6,0.06251,{"cveId":49,"description":50,"publishedDate":32,"cvssScore":51,"cvssVersion":34,"severity":52,"isKev":27,"epssScore":53},"CVE-2015-8924","The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tar file.",5.5,"Medium",0.05379,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":58},"CVE-2016-8687","Stack-based buffer overflow in the safe_fprintf function in tar\u002Futil.c in libarchive 3.2.1 allows remote attackers to cause a denial of service via a crafted non-printable multibyte character in a filename.","2017-02-15",0.05258,{"cveId":60,"description":61,"publishedDate":45,"cvssScore":24,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":62},"CVE-2016-4300","Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.",0.04919,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":68,"severity":52,"isKev":27,"epssScore":69},"CVE-2015-2304","Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive.","2015-03-15",6.4,"v2",0.0489,{"cveId":71,"description":72,"publishedDate":45,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":73},"CVE-2016-4809","The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.",0.04773,{"cveId":75,"description":76,"publishedDate":45,"cvssScore":24,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":77},"CVE-2016-4302","Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.",0.04757,[],[80],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Libarchive - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Libarchive covering 1 product with 70 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Libarchive vulnerabilities, Libarchive security, Libarchive CVE, Libarchive threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":86,"@type":87,"name":88,"description":83,"url":89},"https:\u002F\u002Fschema.org","Organization","Libarchive","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flibarchive",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":91,"apiVersion":92},"2026-10-17T15:53:36.149Z","3.0"]