CVE-2026-14164

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

State: Published
Severity: 7.5 High
Published: Jun 30, 2026
Updated: Oct 31, 2026
Reserved: Jun 30, 2026

Description

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	redhat

Weaknesses

CWE-415 Double Free

Affected Products

Product	Versions
Red Hat Enterprise Linux 10Red Hat	0:3.7.7-10.el10_2 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat	0:3.7.7-5.el10_0.1 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:3.5.3-11.el9_8 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:3.5.3-11.el9_8 and laterNot affected
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat	0:3.5.3-5.el9_2.3 and laterNot affected
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat	0:3.5.3-5.el9_4.2 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat	0:3.5.3-7.el9_6.2 and laterNot affected
Red Hat OpenShift Container Platform 4.13Red Hat	413.92.202609080414-0 and laterNot affected
Red Hat OpenShift Container Platform 4.14Red Hat	414.92.202609011250-0 and laterNot affected
Red Hat OpenShift Container Platform 4.15Red Hat	415.92.202609140326-0 and laterNot affected
Red Hat OpenShift Container Platform 4.16Red Hat	416.94.202609140240-0 and laterNot affected
Red Hat OpenShift Container Platform 4.17Red Hat	417.94.202609191027-0 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	418.94.202609031320-0 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat	418.94.202609171815-0 and laterNot affected
Red Hat OpenShift Container Platform 4.19Red Hat	4.19.9.6.202609021231-0 and laterNot affected
Red Hat OpenShift Container Platform 4.20Red Hat	4.20.9.6.202609021029-0 and laterNot affected
Red Hat OpenShift Container Platform 4.21Red Hat	4.21.9.6.202609021100-0 and laterNot affected
Red Hat OpenShift Container Platform 4.22Red Hat	4.22.9.8.202608130832-0 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat	1791371080 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat	1791371069 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat	1791788287 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat	1791378395 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat	1791970484 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791459707 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791459711 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791459759 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1789029076 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat	1791966259 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790223279 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790223719 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790272426 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790589998 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790589912 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790589914 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790589855 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat	1790598593 and laterNot affected
Red Hat AI Inference Server 3.5Red Hat	1791427182 and laterNot affected
Red Hat AI Inference Server 3.5Red Hat	1791818357 and laterNot affected
Red Hat Discovery 2Red Hat	1786638573 and laterNot affected
Red Hat Discovery 2Red Hat	1788206196 and laterNot affected
Red Hat Hardened ImagesRed Hat	3.8.8-2.hum1 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276886 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276884 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790277045 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276889 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276974 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703497 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703506 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703590 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703568 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703586 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703494 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1790703542 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1786435241 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1786533457 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1786533449 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1786435483 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1786533529 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1787241211 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1787135742 and laterNot affected
Red Hat Update Infrastructure 5Red Hat	1787241260 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8Red Hat
Red Hat OpenShift Container Platform 4Red Hat
Red Hat OpenShift Container Platform 5Red Hat

References

RHSA-2026:30333vendor-advisory
RHSA-2026:52674vendor-advisory
RHSA-2026:52675vendor-advisory
RHSA-2026:54387vendor-advisory
RHSA-2026:54760vendor-advisory
RHSA-2026:54769vendor-advisory
RHSA-2026:56954vendor-advisory
RHSA-2026:58558vendor-advisory
RHSA-2026:58573vendor-advisory
RHSA-2026:58574vendor-advisory
RHSA-2026:58981vendor-advisory
RHSA-2026:61783vendor-advisory
RHSA-2026:62409vendor-advisory
RHSA-2026:63041vendor-advisory
RHSA-2026:63044vendor-advisory
RHSA-2026:63100vendor-advisory
RHSA-2026:65839vendor-advisory
RHSA-2026:65851vendor-advisory
RHSA-2026:67857vendor-advisory
RHSA-2026:67935vendor-advisory
RHSA-2026:70586vendor-advisory
RHSA-2026:70615vendor-advisory
RHSA-2026:72394vendor-advisory
RHSA-2026:72395vendor-advisory
RHSA-2026:72399vendor-advisory
RHSA-2026:72470vendor-advisory
RHSA-2026:72475vendor-advisory
RHSA-2026:72476vendor-advisory
RHSA-2026:72502vendor-advisory
RHSA-2026:73909vendor-advisory
RHSA-2026:73959vendor-advisory
RHSA-2026:73960vendor-advisory
RHSA-2026:73961vendor-advisory
RHSA-2026:73962vendor-advisory
RHSA-2026:74458vendor-advisory
RHSA-2026:74459vendor-advisory
RHSA-2026:74460vendor-advisory
RHSA-2026:74461vendor-advisory
RHSA-2026:74462vendor-advisory
RHSA-2026:74463vendor-advisory
RHSA-2026:74674vendor-advisory
RHSA-2026:82061vendor-advisory
RHSA-2026:82304vendor-advisory
RHSA-2026:82322vendor-advisory
RHSA-2026:82336vendor-advisory
RHSA-2026:82347vendor-advisory
RHSA-2026:82354vendor-advisory
RHSA-2026:82371vendor-advisory
RHSA-2026:82372vendor-advisory
RHSA-2026:82857vendor-advisory
RHSA-2026:82888vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-14164vdb-entry
RHBZ#2493411issue-tracking
https://github.com/libarchive/libarchive/issues/3069
https://github.com/libarchive/libarchive/pull/3071

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.