CVE-2026-5121EPSS p60.5%

CVE-2026-5121CVE-2026-5121

libarchive / libarchive

Description

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS1.07% probability of exploitation · percentile 60.5% · 2026-06-19T12:03:05Z
Last modified2026-06-10

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-4424
CVE
CVE-2026-20884
CVE
CVE-2025-14512
CVE
CVE-2026-4111
CVE
CVE-2026-21413
CVE
CVE-2026-20911
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.