CVE-2025-64031
Received Received - Intake

Heap Overflow in libarchive via gzip Writer

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description
libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c, aka GHSA-92wx-p669-8gr9. This relates to bsdtar. Exploitation envisions a marginally plausible scenario in which original-filename is obtained from an untrusted party. (original-filename is not derived from the input data.)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2025-64031
EUVD
EUVD-2025-210902

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
libarchive libarchive From 3.8.0 (inc)
libarchive libarchive From 3.8.1 (inc)
libarchive libarchive to 3.8.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-64031 is a heap-based buffer overflow in libarchive versions 3.8.0 and 3.8.1. It occurs when the gzip writer copies a caller-provided original-filename string into a fixed-size buffer without checking its length. This can corrupt heap memory and cause process termination. The issue stems from using strcpy() without bounds checking.

Detection Guidance

To detect this vulnerability, check the installed version of libarchive on your system. Run: libarchive --version or dpkg -l libarchive3. If the version is between 3.8.0 and 3.8.1 (inclusive), the system is vulnerable. Additionally, monitor for crashes or errors in applications using libarchive during gzip compression operations.

Impact Analysis

This vulnerability can lead to denial of service by crashing applications using vulnerable libarchive versions. It may also cause heap metadata corruption, potentially affecting system stability. Exploitation requires a maliciously crafted gzip file with an overly long original-filename field.

Mitigation Strategies

Upgrade libarchive to version 3.8.2 or later immediately. If upgrading is not possible, disable gzip compression in applications using libarchive or restrict untrusted input handling. Apply patches from your distribution vendor if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-64031. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart