CVE-2024-48957

Summary

CVE-2024-48957 is a newly disclosed vulnerability affecting libarchive before version 3.7.5. The issue lies in the 'execute_filter_audio' function within 'archive_read_support_format_rar.c'. An attacker can exploit this vulnerability by crafting a malicious RAR archive file. This file triggers an out-of-bounds access issue, allowing data to be written beyond the intended destination, potentially leading to arbitrary code execution. The vulnerability poses a significant risk, as it can be exploited through archive files, a common data format used across various platforms and applications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.