JLSEC-2025-242

Source
https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-242.md
Import Source
https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-242.json
JSON Data
https://api.test.osv.dev/v1/vulns/JLSEC-2025-242
Upstream
Published
2025-11-25T22:03:17.636Z
Modified
2025-11-25T22:33:23.024709Z
Summary
A vulnerability was found in libarchive up to 3.7.7
Details

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific
{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "imported": "2025-11-25T21:58:26.891Z",
            "id": "CVE-2025-1632",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-1632",
            "modified": "2025-03-25T15:41:41.683Z",
            "published": "2025-02-24T14:15:11.590Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1632"
        }
    ]
}
References

Affected packages

Julia / LibArchive_jll

Package

Name
LibArchive_jll
Purl
pkg:julia/LibArchive_jll?uuid=1e303b3e-d4db-56ce-88c4-91e52606a1a8

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.9+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-242.json"