CVE-2026-15028
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A flaw was found in libarchive that allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to denial of service or potentially arbitrary code execution.
Risk Assessment
For the organization, the risk includes potential system unavailability (DoS) or attacker takeover of the affected system, which could result in data loss or infrastructure integrity compromise.
Recommendation
Immediately update libarchive to the latest patched version. Until the update is applied, avoid processing tar archives from untrusted sources.
Original NVD description (English source)
A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.