LI
Product
libarchive
77
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 31Medium 41Low 1
Watch
Add libarchive to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36227 | 9.8 | Nov 22 | In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a… Affected: 3.0.0 before 3.6.2 |
| CVE-2024-37407 | 9.1 | Jun 8 | Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled Affected: 3.7.3 |
Showing 2