THREAT OPS › Threat News › [NVD] CVE-2026-4424 (HIGH 7.5) — A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specia
[NVD] CVE-2026-4424 (HIGH 7.5) — A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specia
CVE-2026-4424 CVSS: 7.5 HIGH Published: 2026-03-19T15:16:28.300
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of s
MITRE ATT&CK techniques
- CompressionT1027.015
Indicators of compromise
- CVE-2026-4424cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4424