JLSEC-2025-237
NoneCVSS
—
EPSS
—
Published
Nov 25, 2025
CISA due date
—
The record
In libarchive before 3.6.2, the software does not check for an error after calling calloc function t...
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Julia | LibArchive_jll | 0 | 3.7.4+0 |
Related vulnerabilities
- JLSEC-2025-239 Libarchive Remote Code Execution Vulnerability Also affects LibArchive_jll
- JLSEC-2025-245 A vulnerability has been identified in the libarchive library, specifically within the… Also affects LibArchive_jll
- JLSEC-2025-250 libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in… Also affects LibArchive_jll
- JLSEC-2025-242 A vulnerability was found in libarchive up to 3.7.7 Also affects LibArchive_jll
- JLSEC-2025-238 Libarchive through 3.6.2 can cause directories to have world-writable permissions Also affects LibArchive_jll
- JLSEC-2025-247 A vulnerability has been identified in the libarchive library Also affects LibArchive_jll
- JLSEC-2025-241 execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5… Also affects LibArchive_jll
- JLSEC-2025-246 A vulnerability has been identified in the libarchive library Also affects LibArchive_jll