ALPINE-CVE-2025-8088

Source
https://security.alpinelinux.org/vuln/CVE-2025-8088
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-8088.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2025-8088
Upstream
  • CVE-2025-8088
Published
2025-08-08T12:15:29Z
Modified
2026-11-03T06:33:01Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.

References

Affected packages

Alpine:v3.24 / clamav

Package

Name
clamav
Purl
pkg:apk/alpine/clamav?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.6-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2025-8088.json"