Back to CVE Browser

CVE-2018-25018

HIGH

7.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2021-07-01

Last Modified2024-11-21

Data SourcesNVD

Vulnerability Description

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.

Affected Platforms (CPE)

📦

Rarlab

Unrar

>= 5.6.1.7 and <= 5.7.4= 6.0.3

References & Advisories

🔗 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9845

🔗 https://github.com/aawc/unrar/releases

🔗 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2018-204.yaml

🔗 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9845

🔗 https://github.com/aawc/unrar/releases

🔗 https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2018-204.yaml

Related Vulnerabilities

CVE-2026-141917.8

An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvo...

CVE-2023-491028.8

NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve executable file per...

CVE-2022-485797.5

UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.

CVE-2022-303337.5

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, ...