libarchive (SUSE:Linux Micro 6.1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Micro 6.1 package libarchive, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (12)

• CVE-2024-48957 — CVSS 7.8 (high): execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file…
• CVE-2024-26256 — CVSS 7.8 (high): Libarchive Remote Code Execution Vulnerability
• CVE-2025-5914 — CVSS 7.8 (high): A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This…
• CVE-2024-48958 — CVSS 7.8 (high): execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file…
• CVE-2024-20697 — CVSS 7.3 (high): Windows libarchive Remote Code Execution Vulnerability
• CVE-2024-20696 — CVSS 7.3 (high): Windows libarchive Remote Code Execution Vulnerability
• CVE-2025-5915 — CVSS 6.6 (medium): A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter…
• CVE-2025-25724 — CVSS 4.0 (medium): list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service…
• CVE-2025-5916 — CVSS 3.9 (low): A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing…
• CVE-2025-5918 — CVSS 3.9 (low): A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar…
• CVE-2025-1632 — CVSS 3.3 (low): A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file…
• CVE-2025-5917 — CVSS 2.8 (low): A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and…