JLSEC-2025-247
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-247.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-247.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/JLSEC-2025-247
- Upstream
- Published
- 2025-11-25T22:03:17.636Z
- Modified
- 2025-11-25T22:33:28.378009Z
- Summary
- A vulnerability has been identified in the libarchive library
- Details
-
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation.
- Database specific
{ "sources": [ { "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-5917", "published": "2025-06-09T20:15:27.330Z", "id": "CVE-2025-5917", "imported": "2025-11-25T21:58:26.895Z", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5917", "modified": "2025-08-15T18:16:42.910Z" } ], "license": "CC-BY-4.0" }- References