CVE-2026-15028 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header

Description

A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.

Exploitable with local access to the machine, with an ordinary account and if a user takes an action; the impact on data or service is limited.

Attack vector

Local

Attack complexity

Low

Privileges required

Low

Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

Low

Affected products and versions