Live › vulnerability › CVE-2026-17591
Go to dashboardlibarchive's archive_entry_copy_mac_metadata() frees an internal buffer before finishing a copy, leaving a use-after-free. An attacker who can feed archive input to an application using this function can crash it or read stale memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that link libarchive and pass attacker-supplied archive entries with macOS metadata into archive_entry_copy_mac_metadata(). Systems that only extract archives you trust, or that do not use this function, are less exposed. The sources do not name affected versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.
This page as .md · .json · in your agent: get_signal("CVE-2026-17591")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.