AZL-109785
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109785.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109785
- Upstream
- CVE-2026-17591
- Published
- 2026-10-16T23:17:01Z
- Modified
- 2026-10-21T14:17:41Z
- Summary
- CVE-2026-17591 affecting package cmake 3.30.3-15
- Details
-
A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.
- References