Wind River Support Network

HomeDefectsLIN1021-16018

Acknowledged

LIN1021-16018 : Security Advisory - libarchive - CVE-2025-5918

Created: Jun 10, 2025 Updated: Sep 9, 2025

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A vulnerability has been identified in the libarchive library. This flaw can be triggered whe
n file streams are piped into bsdtar, potentially allowing for reading past the end of the fi
le. This out-of-bounds read can lead to unintended consequences, including unpredictable prog
ram behavior, memory corruption, or a denial-of-service condition.

CREATE(Triage):(User=lchen-cn) CVE-2025-5918 (https://nvd.nist.gov/vuln/detail/CVE-2025-5918)