CVE-2025-5916

A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. This bug affects libarchive versions prior to 3.8.0.

• CWE-190

• https://access.redhat.com/security/cve/CVE-2025-5916Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2370872Issue Tracking
• https://github.com/libarchive/libarchive/pull/2568Patch
• https://github.com/libarchive/libarchive/releases/tag/v3.8.0Release Notes

Published

Jun 9, 2025

Last Modified

Jun 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-59154Openfire is an XMPP server licensed under the Open Source Ap…5.9
• CVE-2025-59155hackmd-mcp is a Model Context Protocol server for integratin…6.9
• CVE-2025-59156Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2025-59157Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2025-59158Coolify is an open-source and self-hostable tool for managin…8
• CVE-2025-59159SillyTavern is a locally installed user interface that allow…9.6
• CVE-2025-59160Matrix JavaScript SDK is a Matrix Client-Server SDK for Java…2.7
• CVE-2025-59161Element Web is a Matrix web client built using the Matrix Re…2.7
• CVE-2025-59162color-convert provides plain color conversion functions in J…8.8
• CVE-2025-59163vet is an open source software supply chain security tool. V…2.1
• CVE-2025-5917A vulnerability has been identified in the libarchive librar…5
• CVE-2025-59171Due to insufficient sanitization, an attacker can upload a s…9.8