CVE-2026-4424

{"id": "CVE-2026-4424", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2026-03-19T15:16:28.300", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-4424", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006", "source": "secalert@redhat.com"}, {"url": "https://github.com/libarchive/libarchive/pull/2898", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en libarchive. Esta vulnerabilidad de lectura fuera de l\u00edmites de la pila (heap) existe en la l\u00f3gica de procesamiento de archivos RAR debido a una validaci\u00f3n incorrecta del tama\u00f1o de la ventana deslizante LZSS despu\u00e9s de las transiciones entre m\u00e9todos de compresi\u00f3n. Un atacante remoto puede explotar esto al proporcionar un archivo RAR especialmente dise\u00f1ado, lo que lleva a la divulgaci\u00f3n de informaci\u00f3n sensible de la memoria de la pila (heap) sin requerir autenticaci\u00f3n ni interacci\u00f3n del usuario."}], "lastModified": "2026-03-20T13:39:46.493", "sourceIdentifier": "secalert@redhat.com"}