Denial of Service Vulnerability in RAR Decoding Library by Nwaples

CVE-2025-11579

What is CVE-2025-11579?

The RAR decoding library by Nwaples has a vulnerability that allows an attacker to exploit it by submitting a specially crafted RAR file. The flaw arises from the lack of restrictions on the dictionary size during the decoding process, which can lead to an Out Of Memory Crash. This results in a Denial of Service condition, making the affected applications unable to process further requests effectively. Users of rardecode are advised to upgrade to a fixed version to mitigate this risk.

References