libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
CVE-2021-36976
CVSS base score
6.5 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-416
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
libarchive libarchive
fedoraproject fedora
apple ipados
apple iphone os
apple macos
apple watchos
splunk universal forwarder
References
- seclists.org Mailing List, Third Party Advisory
- seclists.org Mailing List, Third Party Advisory
- seclists.org Mailing List, Third Party Advisory
- bugs.chromium.org Issue Tracking, Third Party Advisory
- github.com Third Party Advisory
- lists.fedoraproject.org Mailing List, Third Party Advisory
- security.gentoo.org Third Party Advisory
- support.apple.com Third Party Advisory
- support.apple.com Third Party Advisory
- support.apple.com Third Party Advisory