Libarchive

Libarchive is a widely embedded archive-handling library that sits deep in the software supply chain despite a narrow product scope, bundled into countless downstream applications, operating systems, and utilities for TAR, ZIP, CPIO, and other archive formats. A single vulnerability in the library can propagate across the entire ecosystem of dependent software, making even modest disclosure counts significant in practice. The vendor's exposure recurs through memory-safety and input-validation weakness classes—out-of-bounds reads, NULL-pointer dereferences, buffer boundary violations, integer overflows, and improper input validation—that are characteristic of C-based parsers handling untrusted, variable-length archive structures. Defenders should inventory products and systems that bundle this library and prioritize its updates within dependency chains rather than tracking the library in isolation, since remediation typically cascades through downstream vendors. Current exploitation activity and exposure counts are shown alongside this summary.