Product by Debian
Libarchive
27 known vulnerabilities in Libarchive (Debian), 0 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-26256 | Libarchive Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2018-1000877 | libarchive: Double Free | 8.8 | |
| High | CVE-2018-1000878 | libarchive: Use-After-Free | 8.8 | |
| Critical | CVE-2022-36227 | libarchive: NULL Pointer Dereference | 9.8 | |
| High | CVE-2015-8917 | libarchive: NULL Pointer Dereference | 7.5 | |
| High | CVE-2019-18408 | libarchive: Use-After-Free | 7.5 | |
| High | CVE-2024-20696 | Windows libarchive Remote Code Execution Vulnerability | 7.3 | |
| High | CVE-2026-5121 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing | 7.5 | |
| Medium | CVE-2019-1000019 | libarchive: Out-of-Bounds Read | 6.5 | |
| Medium | CVE-2015-8916 | libarchive: NULL Pointer Dereference | 6.5 | |
| Medium | CVE-2019-1000020 | libarchive: Infinite Loop | 6.5 | |
| High | CVE-2026-14164 | Red Hat Enterprise Linux 10: Double Free | 7.5 | |
| High | CVE-2015-8931 | libarchive: Integer Overflow | 7.8 | |
| Medium | CVE-2017-14166 | libarchive: Buffer Over-read | 6.5 | |
| High | CVE-2026-4424 | Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing | 7.5 | |
| Medium | CVE-2015-8932 | libarchive: Denial of Service | 5.5 | |
| High | CVE-2026-4111 | Red Hat Enterprise Linux 10: Infinite Loop | 7.5 | |
| High | CVE-2025-5914 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | 7.8 | |
| Medium | CVE-2026-4426 | Libarchive: libarchive: denial of service via malformed iso file processing | 6.5 | |
| High | CVE-2021-23177 | Libarchive: Link Following | 7.8 | |
| Low | CVE-2026-15028 | Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header | 3.9 | |
| High | CVE-2021-31566 | Libarchive: Link Following | 7.8 | |
| Medium | CVE-2019-19221 | libarchive: Out-of-Bounds Read | 5.5 | |
| Low | CVE-2026-16517 | Libarchive: libarchive: signed integer overflow in archive_write_zip_header | 2.9 | |
| Medium | CVE-2025-5918 | Libarchive: reading past eof may be triggered for piped file streams | 3.9 |