https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T09:18:33.082697+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-1632 CVE-2025-1632 — libarchive bsdunzip.c list null pointer dereference 2026-10-04T09:18:33.183457+00:00

Affected: libarchive

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://vulnerability.circl.lu/vuln/usn-7454-1 USN-7454-1 — libarchive vulnerabilities 2026-10-04T09:18:33.183557+00:00

Affected: Ubuntu:20.04:LTS: libarchive, Ubuntu:22.04:LTS: libarchive, Ubuntu:24.04:LTS: libarchive

It was discovered that the libarchive bsdunzip utility incorrectly handled certain ZIP archive files. If a user or automated system were tricked into processing a specially crafted ZIP archive, an attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.04. (CVE-2025-1632)

It was discovered that libarchive incorrectly handled certain TAR archive files. If a user or automated system were tricked into processing a specially crafted TAR archive, an attacker could use this issue to cause libarchive to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-25724)