Input Validation and Logic

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code…CVE-2016-1541Libarchive · 10% likely

   CWE-20

2. The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (applicatio…CVE-2016-4809Libarchive · 4.8% likely

   CWE-20

3. The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a…CVE-2016-5418Libarchive · 4.7% likely

   CWE-20

4. bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.CVE-2015-8930Libarchive · 4.3% likely

   CWE-20

5. The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service (crash) via…CVE-2015-8923Libarchive · 2.9% likely

   CWE-20

6. The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted t…CVE-2015-8932Libarchive · 2.2% likely

   CWE-20

7. list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafte…CVE-2025-25724libarchive · CVSS 4 · 0.4% likely

   CWE-252

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.