CVE-2026-14164

HIGH 7.5

Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

CVSS Score

7.5

EPSS Score

0.7%

EPSS Percentile

53th

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

CWE	CWE-415
Vendor	red hat
Product	red hat enterprise linux 10
Published	Jun 30, 2026
Last Updated	Sep 28, 2026

Stay Ahead of the Next One

Get instant alerts for red hat red hat enterprise linux 10

Be the first to know when new high vulnerabilities affecting red hat red hat enterprise linux 10 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.14

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.15

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.16

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.18

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.19

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.20

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.21

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.22

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Red Hat Discovery 2

All versions affected

Red Hat / Red Hat Discovery 2

All versions affected

Red Hat / Red Hat Hardened Images

All versions affected