Use-After-Free Vulnerability in libarchive by The Open Source Community
CVE-2021-36976

6.5MEDIUM

Key Information:

Vendor: Libarchive
Status: Libarchive
Vendor: CVE Published:; 20 July 2021

What is CVE-2021-36976?

The libarchive library versions 3.4.1 through 3.5.1 are susceptible to a use-after-free issue within the copy_string function, which is invoked from do_uncompress_block and process_block operations. This vulnerability could potentially allow an attacker to exploit the mishandling of memory, leading to unexpected behavior or crashes in applications utilizing the affected library versions. It is essential for users and developers to review their implementations and apply the necessary updates to mitigate associated risks.