VulnSocial

CVE-2025-5915Patch(libarchive / enterprise_linux)

LOWCVSS 6.6 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch libarchive enterprise_linux systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.

libarchive CVEsBack to dashboard
2.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux
  • libarchive
  • openshift_container_platform

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
libarchiveredhat
Products
enterprise_linuxlibarchiveopenshift_container_platform

6 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-30: 1PoC Mentioned / Linked · 2026-07-30: 1Patch / Workaround · 2026-07-30: 1Technical Details · 2026-07-30: 107-30
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Paolo Russo@PaoloRu69949840
    Patch

    iOS 18.5 (22F76): libarchive 3.7.4 iOS 18.6 (22G86): libarchive 3.7.4 Identical string. Only 18.5 ships CVE-2025-5915. Apple grafted the 3.8.0 fix into its 3.7.4 fork: 8 instructions, no version bump. Patch-diff + on-device proof (~150 KB heap leak): https://blog.chess-set.eu/en/posts/the-version-number-lies

    Post summary

    Apple mitigated CVE‑2025‑5915 via an internal patch in iOS 18.6, despite the identical libarchive version in 18.5; a patch diff and on‑device proof of a 150 KB heap leak are available.

    0000066
    29 followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
Applibarchivelibarchive---
OSredhatenterprise_linux10.0--
OSredhatenterprise_linux6.0--
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux9.0--
Appredhatopenshift_container_platform4.0--

Explore more

Back to dashboardlibarchive CVEsredhat CVEsenterprise_linux vulnerabilities