Vulnerabilities in Libarchive leading to memory corruption
In the Libarchive library, which provides functions for working with various archive formats and compressed files, vulnerabilities have been identified that lead to buffer overflows when processing specially crafted RAR format archives. The vulnerabilities are present in the functions execute_filter_audio (CVE-2024-48957) and execute_filter_delta (CVE-2024-48958), caused by the lack of checks to ensure that the 'src' block does not overlap with the 'dst' block in corrupted archives. The vulnerabilities have been addressed […]
