CVE-2025-64031

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which original-filename is obtained from an untrusted party. (original-filename is not derived from the input data.)

• CWE-122

• https://gist.github.com/ttuurrnn/1365a4a9b1c3d5826a3a9bbe111f26b8
• https://github.com/libarchive/libarchive/blob/master/libarchive/archive_write_add_filter_gzip.c
• https://github.com/libarchive/libarchive/pull/2734
• https://github.com/libarchive/libarchive/pull/2734/commits
• https://github.com/libarchive/libarchive/pull/2734/files
• https://gist.github.com/ttuurrnn/1365a4a9b1c3d5826a3a9bbe111f26b8

Published

Sep 14, 2026

Last Modified

Sep 22, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64011Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct …4.3
• CVE-2025-64012InvoicePlane commit debb446c is vulnerable to Incorrect Acce…4.3
• CVE-2025-6402A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.11…8.8
• CVE-2025-64027Snipe-IT v8.3.4 (build 20218) contains a reflected cross-sit…6.1
• CVE-2025-6403A vulnerability was found in code-projects School Fees Payme…9.8
• CVE-2025-64030Eximbills Enterprise 4.1.5 (Built on 2020-10-30) is vulnerab…5.4
• CVE-2025-6404A vulnerability classified as critical has been found in Cam…9.8
• CVE-2025-64046OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripti…6.1
• CVE-2025-64047OpenRapid RapidCMS 1.3.1 is vulnerable to Cross Site Scripti…6.1
• CVE-2025-64048YCCMS 3.4 contains a stored cross-site scripting (XSS) vulne…6.1
• CVE-2025-64049A stored cross-site scripting (XSS) vulnerability in the mod…4.8
• CVE-2025-6405A vulnerability classified as critical was found in Campcode…9.8