Double Free Vulnerability in libarchive's RAR Decoder
CVE-2018-1000877

8.8HIGH

Key Information:

Vendor: Libarchive
Status: Libarchive
Vendor: CVE Published:; 20 December 2018

What is CVE-2018-1000877?

libarchive versions v3.1.0 and later introduce a double free vulnerability in the RAR decoder due to improper handling of memory allocation in the function parse_codes(). An attacker can exploit this issue by enticing victims to open specially crafted RAR archive files, leading to potential crashes or Denial of Service (DoS). This vulnerability emphasizes the importance of safeguarding data processing routines, particularly in widely-used libraries like libarchive.