CVE-2026-4111: libarchive Infinite Loop

CVSS: 7.5v3.1HighAwaiting analysis

AliasesRHSA-2026:5063RHSA-2026:5080RHSA-2026:6647+5 more

Published 13-03-2026Last modified 14-10-2026

Vulnerability summary

CVE-2026-4111 is a high (CVSS 7.5) Infinite Loop vulnerability in libarchive. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.5% of scored vulnerabilities.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

0.70%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 5

MGASA-2026-0241 MGASA-2026-0366 RHSA-2026:8865 RHSA-2026:8944 SUSE-SU-2026:22241-1 SUSE-SU-2026:22248-1+3 more

Timeline

13-03-2026
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.

CVSS metrics

5 scores · 5 sources · 1 version

v3.17.5

EPSS trend

Probability

0.70%

Chance of exploitation in the next 30 days

Percentile

53%

Versus all other CVEs

30-day change

+0.01 pp

From 0.69% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected systems

Redhat9 products

bsdcat-debuginfo< 0:3.7.7-5.el10_1 | < 0:3.5.3-7.el9_7 | < 0:3.5.3-5.el9_2.1 | < 0:3.5.3-2.el9_0.3 | < 0:3.5.3-6.el9_6.1 | < 0:3.5.3-4.el9_4.2
bsdcpio-debuginfo< 0:3.7.7-5.el10_1 | < 0:3.5.3-7.el9_7 | < 0:3.5.3-5.el9_2.1 | < 0:3.5.3-2.el9_0.3 | < 0:3.5.3-6.el9_6.1 | < 0:3.5.3-4.el9_4.2
bsdtar< 0:3.7.7-5.el10_1 | < 0:3.5.3-7.el9_7 | < 0:3.5.3-5.el9_2.1 | < 0:3.5.3-2.el9_0.3 | < 0:3.5.3-6.el9_6.1 | < 0:3.5.3-4.el9_4.2
bsdtar-debuginfo< 0:3.7.7-5.el10_1 | < 0:3.5.3-7.el9_7 | < 0:3.5.3-5.el9_2.1 | < 0:3.5.3-2.el9_0.3 | < 0:3.5.3-6.el9_6.1 | < 0:3.5.3-4.el9_4.2
bsdunzip-debuginfo< 0:3.7.7-5.el10_1

Show all 9

Debian1 product

libarchive< 3.6.2-1+deb12u4 | < 3.7.4-4+deb13u1 | < 3.8.6-1

Ubuntu1 product

libarchive< 3.1.2-7ubuntu2.8+esm4 | < 3.1.2-11ubuntu0.16.04.8+esm2 | < 3.2.2-3.1ubuntu0.7+esm2 | < 3.4.0-2ubuntu1.5+esm1 | < 3.6.0-1ubuntu1.6 | < 3.7.2-2ubuntu0.6 | < 3.7.7-0ubuntu3.1

3 vendors · 11 products