CVE-2025-64031CWE-122

CVE-2025-64031

Low · published September 14, 2026

CVSS v3.1
2.5
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which original-filename is obtained from an untrusted party. (original-filename is not derived from the input data.)

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-09-14T05:16Z
References (6)
https://gist.github.com/ttuurrnn/1365a4a9b1c3d5826a3a9bbe111f26b8 · [email protected]https://github.com/libarchive/libarchive/blob/master/libarchive/archive_write_add_filter_gzip.c · [email protected]https://github.com/libarchive/libarchive/pull/2734 · [email protected]https://github.com/libarchive/libarchive/pull/2734/commits · [email protected]https://github.com/libarchive/libarchive/pull/2734/files · [email protected]https://gist.github.com/ttuurrnn/1365a4a9b1c3d5826a3a9bbe111f26b8 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 17 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 14 SEP 00:00Z
    libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in…
    cvelistv5