libarchive (SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS package libarchive, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (10)

• CVE-2025-5914 — CVSS 7.8 (high): A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This…
• CVE-2026-5121 — CVSS 7.5 (high): A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A…
• CVE-2026-4111 — CVSS 7.5 (high): A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data()…
• CVE-2026-4424 — CVSS 7.5 (high): A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper…
• CVE-2025-5915 — CVSS 6.6 (medium): A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter…
• CVE-2026-4426 — CVSS 6.5 (medium): A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation…
• CVE-2025-60753 — CVSS 5.5 (medium): An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c when processing…
• CVE-2025-5918 — CVSS 3.9 (low): A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar…
• CVE-2025-5916 — CVSS 3.9 (low): A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing…
• CVE-2025-5917 — CVSS 2.8 (low): A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and…