executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.
{
"sources": [
{
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-48957",
"imported": "2025-11-25T21:58:26.889Z",
"id": "CVE-2024-48957",
"published": "2024-10-10T02:15:02.990Z",
"modified": "2025-09-29T21:35:07.130Z",
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48957"
}
],
"license": "CC-BY-4.0"
}