Medium severity6.5NVD Advisory· Published Oct 15, 2020· Updated Jun 17, 2026
CVE-2020-21674
CVE-2020-21674
Description
Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:libarchive:libarchive:3.4.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libarchive:libarchive:3.4.1:*:*:*:*:*:*:*
- (no CPE)range: <3.4.1
- libarchive/libarchivedescription
Patches
Vulnerability mechanics
References
2- github.com/libarchive/libarchive/commit/4f085eea879e2be745f4d9bf57e8513ae48157f4nvdPatchThird Party Advisory
- github.com/libarchive/libarchive/issues/1298nvdThird Party Advisory
News mentions
0No linked articles in our index yet.