CVE-2021-36976 — Vulnerability intelligence

libarchive — libarchive

Published: 2021-07-20T06:49:15.000Z

CVSS

6.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).

Sources

• CVE-2021-36976
• Issue Tracking, Third Party Advisory
• Third Party Advisory
• Mailing List, Third Party Advisory
• Third Party Advisory
• Third Party Advisory
• Third Party Advisory
• Third Party Advisory
• Original advisory
• CVE-2021-36976