Out-of-bounds Read Vulnerability in 7zip Decompression in libarchive
CVE-2019-1000019

6.5MEDIUM

Key Information:

Vendor: Libarchive
Status: Libarchive
Vendor: CVE Published:; 4 February 2019

What is CVE-2019-1000019?

libarchive has a vulnerability that can cause a denial of service through an out-of-bounds read in the 7zip decompression functionality. If a user opens a specially crafted 7zip file, it may lead to a crash, affecting the application's reliability. This issue is present in libarchive from version 3.0.2 onwards, specifically within the archive_read_support_format_7zip.c file, affecting the header_bytes() function.