Use After Free vulnerability in RAR decoder of libarchive
CVE-2018-1000878

8.8HIGH

Key Information:

Vendor: Libarchive
Status: Libarchive
Vendor: CVE Published:; 20 December 2018

What is CVE-2018-1000878?

libarchive versions from commit 416694915449219d505531b1096384f3237dd6cc onwards, starting with release v3.1.0, contain a vulnerability in the RAR decoder that can lead to a Denial of Service (DoS) condition. Exploitation of this vulnerability may occur when a victim opens a specially crafted RAR archive. There is currently no available information regarding the potential for Remote Code Execution (RCE) exploits related to this issue.