JLSEC-2025-244 High 7.5

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar...

JLSEC Published: Nov 25, 2025
Modified: Jul 23, 2026
Severity: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Packages: LibArchive_jll < 3.7.9+0
Upstream: CVE-2024-48615

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

References

https://github.com/88Sanghy88/crash-test
https://github.com/libarchive/libarchive/releases/download/v3.7.6/libarchive-3.7.6.tar.gz