CVE detail
CVE-2026-4424
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 18.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
39 source links · newest first
- The July 2026 Apple Security Update ReviewZero Day Initiative
ation, we’re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out. · CVE-2026-43818 (ImageIO) – This bug could allow the “Processing [of] a maliciously crafted image may lead to arbitrary code execution ." ImageIO is the classic zero-/one-click remote surface on Apple platforms (images auto-parsed in M
vendorwww.thezdi.comJul 30, 2026, 2:00 PM - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4424.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMar 19, 2026, 3:16 PM No excerpt available.
Exploitgithub.comMar 19, 2026, 3:16 PM- https://bugzilla.redhat.com/show_bug.cgi?id=2449006bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/security/cve/CVE-2026-4424access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:9832access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:9592access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:9026access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8944access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8908access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8873access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8867access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8866access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8865access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8864access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8534access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8521access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8517access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8510access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:8492access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:25096access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:21690access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:20040access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19725access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:19724access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:17596access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:16174access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:16030access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:16009access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:16008access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:15087access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:14937access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:14773access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:13812access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:12274access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:12071access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:11768access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:10097access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM - https://access.redhat.com/errata/RHSA-2026:10065access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 19, 2026, 3:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-6021CVSS 7.5 · High
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memor…
- CVE-2024-9676CVSS 6.5 · Medium
A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang and resul…
- CVE-2025-5918CVSS 3.9 · Low
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of…
- CVE-2026-5745CVSS 5.5 · Medium
A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When process…
- CVE-2026-5121CVSS 7.5 · High
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by pro…
- CVE-2026-4426CVSS 6.5 · Medium
A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO…