VYPR
Medium severity4.0OSV Advisory· Published Feb 16, 2025· Updated Apr 15, 2026

CVE-2024-57970

CVE-2024-57970

Description

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

22

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.