Heap Out-of-Bounds Read Vulnerability in Libarchive Affects Multiple Versions
CVE-2026-4424

7.5HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 19 March 2026

What is CVE-2026-4424?

A security flaw has been identified in libarchive, specifically in its handling of RAR archive processing. This vulnerability is due to inadequate validation of the LZSS sliding window size during method transitions within the compression logic. Attackers can exploit this issue by creating specially crafted RAR archives that lead to the disclosure of sensitive heap memory information. This exploit can be executed remotely without requiring any form of authentication or interaction from the user, posing significant risks to systems utilizing affected versions of libarchive.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch