Integer Overflow in libarchive RAR Reader Causes Double-Free
CVE-2025-5914 Published on June 9, 2025

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2025-5914 is exploitable with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. Public availability of a proof of concept (POC) exploit exists for CVE-2025-5914. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Timeline

Reported to Red Hat.

Made public.

Weakness Type

Integer Overflow or Wraparound

The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. An integer overflow or wraparound occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may wrap to become a very small or negative number. While this may be intended behavior in circumstances that rely on wrapping, it can have security consequences if the wrap is unexpected. This is especially the case if the integer overflow can be triggered using user-supplied inputs. This becomes security-critical when the result is used to control looping, make a security decision, or determine the offset or size in behaviors such as memory allocation, copying, concatenation, etc.


Products Associated with CVE-2025-5914

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2025-5914 are published in these products:

Libarchive
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Openshift Container Platform
 
Canonical Ubuntu Linux
 
Enterpriselinux 10 0
 
Rhelels 7
 
Enterpriselinux 8
 
Rhelaus 8 2
 
Rheleuslonglife 8 4
 
Rhelaus 8 4
 
Rhele4s 8 6
 
Rhelaus 8 6
 
Rheltus 8 6
 
Rhele4s 8 8
 
Rheltus 8 8
 
Enterpriselinux 9
 
Rhele4s 9 0
 
Rhele4s 9 2
 
Rheleus 9 4
 
Insightsproxy 1 5
 
Openshiftdistributedtracing 3 5
 
Confidentialcomputeattestation 1 10
 
Enterpriselinux 6
 
Openshift 4
 
Red Hat Rhel Els
 
Red Hat Rhel Aus
 
Red Hat Rhel Eus Long Life
 
Red Hat Rhel E4s
 
Red Hat Rhel Tus
 
Red Hat Rhel Eus
 
Red Hat Webterminal
 
Red Hat Insights Proxy
 
Red Hat Openshift Distributed Tracing
 
Red Hat Confidential Compute Attestation
 
Red Hat Openshift
 
Red Hat Discovery
 
Red Hat Rhivos
 
Red Hat Cert Manager
 
Red Hat Openshift Compliance Operator
 
Red Hat Openshift File Integrity Operator
 
Red Hat Openshift Serverless
 

Exploit Probability

EPSS
0.02%
Percentile
6.44%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.