JLSEC-2025-244

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-244.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-244.json

JSON Data

https://api.osv.dev/v1/vulns/JLSEC-2025-244

Upstream

CVE-2024-48615

Published

2025-11-25T22:03:17Z

Modified

2026-07-23T22:30:23Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar...

Details

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

Database specific

{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "database_specific": {
                "status": "Analyzed"
            },
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48615",
            "id": "CVE-2024-48615",
            "imported": "2026-07-17T20:49:12.611Z",
            "modified": "2026-06-17T07:58:37.273Z",
            "published": "2025-03-28T15:15:45.023Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-48615"
        }
    ]
}

References

Affected packages

Julia / LibArchive_jll

Package

Name: LibArchive_jll
Purl: pkg:julia/LibArchive_jll?uuid=1e303b3e-d4db-56ce-88c4-91e52606a1a8

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.7.9+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-244.json"