CVE Catalog
CVE-2024-48957
MediumSummary
The execute_filter_audio function in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
Risk Assessment
The risk includes out-of-bounds memory access, which could lead to crashes or code execution.
Recommendation
It is recommended to upgrade libarchive to version 3.7.5 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.