JLSEC-2025-247
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-247.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-247.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/JLSEC-2025-247
- Upstream
- Published
- 2025-11-25T22:03:17.636Z
- Modified
- 2026-04-20T17:00:54.780574Z
- Summary
- A vulnerability has been identified in the libarchive library
- Details
-
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation. This bug affects libarchive versions prior to 3.8.0.
- Database specific
{ "sources": [ { "imported": "2026-04-20T16:47:56.014Z", "database_specific": { "status": "Modified" }, "modified": "2025-12-12T01:15:46.527Z", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5917", "id": "CVE-2025-5917", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-5917", "published": "2025-06-09T20:15:27.330Z" } ], "license": "CC-BY-4.0" }- References