CVE-2017-14501: Libarchive

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header.

Affected products

• Libarchive Libarchive: version 3.3.2 only

Published 2017-09-17. Last modified 2026-06-17.