Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-5121

37
FAUCET Score

CVE-2026-5121 identifies a critical integer overflow vulnerability in libarchive's zisofs block pointer allocation logic, specifically impacting 32-bit systems. A remote attacker can exploit this flaw by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow and potential arbitrary code execution. This vulnerability carries a CVSS score of 9.8 Critical due to its network attack vector and low attack complexity. Despite its severity, there is currently no evidence of active exploitation, no known public exploit code available (e.g., Metasploit, Nuclei, ExploitDB), and minimal community discussion surrounding it.

Impacted Technologies

VendorProductVersion(s)CPE
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:libarchive:libarchive:-:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*
4.0CPE matchmatch criteria
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
6.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.07%
Probability of exploitation in next 30 days
EPSS Percentile
61.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0107 is in the 47th percentile among its peer group of 36,833 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (18)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: azl3 libarchive 3.7.7-5 on Azure Linux 3.0Fixed in: 3.7.7-6
microsoftpatch availablevia msrc
Product: 21141-17086Fixed in: 3.6.1-10
microsoftpatch availablevia msrc
Product: 21142-17084Fixed in: 3.7.7-6
microsoftpatch availablevia msrc
Product: cbl2 libarchive 3.6.1-9 on CBL Mariner 2.0Fixed in: 3.6.1-10
ubuntupatch availablevia ubuntu_usn
Product: libarchive (questing)Fixed in: 3.7.7-0ubuntu3.2
ubuntupatch availablevia ubuntu_usn
Product: libarchive (resolute)Fixed in: 3.8.5-1ubuntu2.1
ubuntupatch availablevia ubuntu_usn
Product: libarchive (trusty)Fixed in: 3.1.2-7ubuntu2.8+esm5
ubuntupatch availablevia ubuntu_usn
Product: libarchive (xenial)Fixed in: 3.1.2-11ubuntu0.16.04.8+esm3
ubuntupatch availablevia ubuntu_usn
Product: libarchive (bionic)Fixed in: 3.2.2-3.1ubuntu0.7+esm3
ubuntupatch availablevia ubuntu_usn
Product: libarchive (focal)Fixed in: 3.4.0-2ubuntu1.5+esm2
ubuntupatch availablevia ubuntu_usn
Product: libarchive (jammy)Fixed in: 3.6.0-1ubuntu1.7
ubuntupatch availablevia ubuntu_usn
Product: libarchive (noble)Fixed in: 3.7.2-2ubuntu0.7
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: rhcos
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: libarchive
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: libarchive
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: libarchive
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: libarchive

Vendor Advisories (3)

ubuntuUSN-8292-1

libarchive vulnerabilities

May 21, 2026
redhatCVE-2026-5121Moderate

CVE-2026-5121

Mar 30, 2026
microsoft2026-Mar/CVE-2026-5121Important

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Mar 10, 2026

References

cert-portal.siemens.com / productcert/html/ssa-585531.html
access.redhat.com / errata/RHSA-2026:10065
access.redhat.com / errata/RHSA-2026:10097
access.redhat.com / errata/RHSA-2026:11768
access.redhat.com / errata/RHSA-2026:12071
access.redhat.com / errata/RHSA-2026:12274
access.redhat.com / errata/RHSA-2026:13812
access.redhat.com / errata/RHSA-2026:14773
access.redhat.com / errata/RHSA-2026:14937
access.redhat.com / errata/RHSA-2026:15087
access.redhat.com / errata/RHSA-2026:16008
access.redhat.com / errata/RHSA-2026:16009
access.redhat.com / errata/RHSA-2026:16030
access.redhat.com / errata/RHSA-2026:16174
access.redhat.com / errata/RHSA-2026:17596
access.redhat.com / errata/RHSA-2026:19724
access.redhat.com / errata/RHSA-2026:19725
access.redhat.com / errata/RHSA-2026:20040
access.redhat.com / errata/RHSA-2026:21690
access.redhat.com / errata/RHSA-2026:25096
access.redhat.com / errata/RHSA-2026:8510
access.redhat.com / errata/RHSA-2026:8517
access.redhat.com / errata/RHSA-2026:8521
access.redhat.com / errata/RHSA-2026:8534
access.redhat.com / errata/RHSA-2026:8864
access.redhat.com / errata/RHSA-2026:8866
access.redhat.com / errata/RHSA-2026:8867
access.redhat.com / errata/RHSA-2026:8873
access.redhat.com / errata/RHSA-2026:8908
access.redhat.com / errata/RHSA-2026:8944
access.redhat.com / errata/RHSA-2026:9026
access.redhat.com / errata/RHSA-2026:9592
access.redhat.com / errata/RHSA-2026:9832
access.redhat.com / security/cve/CVE-2026-5121
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
github.com / advisories/GHSA-2vwv-vqpv-v8vc
Third Party Advisory
github.com / libarchive/libarchive/pull/2934
Issue TrackingPatch