CVE Feed

    Dashboard / CVE / CVE-2026-14164

    CVE-2026-14164

    A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

    Published:Jun 30, 2026
    Last Modified:Sep 9, 2026
    EPS:Jun 30, 2026
    EPSS Score:0.00488
    CVSS Score:7.5

    Affected Products

    Vendor
    Libarchive
    Product
    Libarchive
    Vendor
    Red Hat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Discovery
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Hardened Images
    Vendor
    Redhat
    Product
    Hummingbird
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Openshift Container Platform
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhui

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-415 Double Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-16517 (CVSS 2.9) — A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header …
    CVE-2026-5745 (CVSS 5.5) — A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, spec…
    CVE-2026-5121 (CVSS 7.5) — A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs bloc…
    CVE-2026-4424 (CVSS 7.5) — A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processin…
    CVE-2026-4426 (CVSS 6.5) — A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, …
    CVE-2025-60753 (CVSS 5.5) — An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/s…
    CVE-2025-5916 (CVSS 3.9) — A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can…
    CVE-2025-5918 (CVSS 3.9) — A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams ar…
    CVE-2025-5917 (CVSS 2.8) — A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculati…
    CVE-2025-5915 (CVSS 6.6) — A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read d…

    References

    https://access.redhat.com/errata/RHSA-2026:30333
    https://access.redhat.com/errata/RHSA-2026:52674
    https://access.redhat.com/errata/RHSA-2026:52675
    https://access.redhat.com/errata/RHSA-2026:54387
    https://access.redhat.com/errata/RHSA-2026:54760
    https://access.redhat.com/errata/RHSA-2026:54769
    https://access.redhat.com/errata/RHSA-2026:56954
    https://access.redhat.com/errata/RHSA-2026:58558
    https://access.redhat.com/errata/RHSA-2026:58573
    https://access.redhat.com/errata/RHSA-2026:58574
    https://access.redhat.com/errata/RHSA-2026:58981
    https://access.redhat.com/errata/RHSA-2026:61783
    https://access.redhat.com/errata/RHSA-2026:63041
    https://access.redhat.com/errata/RHSA-2026:63044
    https://access.redhat.com/errata/RHSA-2026:63100
    https://access.redhat.com/security/cve/CVE-2026-14164
    https://bugzilla.redhat.com/show_bug.cgi?id=2493411
    https://github.com/libarchive/libarchive/issues/3069
    https://github.com/libarchive/libarchive/pull/3071
    https://github.com/libarchive/libarchive/issues/3069

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High