JLSEC-2025-244

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar i...

JLSEC Published: Nov 25, 2025
Modified: Apr 20, 2026
Affected Packages: LibArchive_jll < 3.7.9+0
Aliases / Upstream: CVE-2024-48615

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function headerpaxextension at rchivereadsupportformattar.c:1844:8.

References

https://github.com/88Sanghy88/crash-test
https://github.com/88Sanghy88/crash-test
https://github.com/libarchive/libarchive/releases/download/v3.7.6/libarchive-3.7.6.tar.gz