CVE-2016-4300: Libarchive

High severity, CVSS 7.8. EPSS: 4.9% chance of exploitation in the next 30 days.

Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.

Affected products

• Libarchive Libarchive: up to and including 3.2.0
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Hpc Node: version 7.0 only
• Red Hat Enterprise Linux Hpc Node Eus: version 7.2 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Server Aus: version 7.2 only
• Red Hat Enterprise Linux Server Eus: version 7.2 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2016-09-21. Last modified 2026-06-17.