CVE-2025-5915: Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions.
Other sources
In libarchive before 3.8.0, because size of filter block can sometime be larger then lzss window, a heap buffer over read may occur.
— Red Hat
Libarchive: heap buffer over read in copyfromlzsswindow() at archivereadsupportformatrar.c
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.7.7-3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.6.1-7
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5915?
CVE-2025-5915 is classified as a moderate severity vulnerability due to the potential for heap buffer over-read.
How do I fix CVE-2025-5915?
To fix CVE-2025-5915, you should update the libarchive library to the latest patched version.
What systems are affected by CVE-2025-5915?
CVE-2025-5915 affects systems using the vulnerable versions of the libarchive library.
What are the potential impacts of CVE-2025-5915?
CVE-2025-5915 can result in information disclosure and may allow attackers to exploit memory corruption.
Is there a workaround for CVE-2025-5915?
Currently, there are no known workarounds for CVE-2025-5915 other than applying the security updates.