CVE-2017-14503: Libarchive

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.

Affected products

• Libarchive Libarchive: version 3.3.2 only

Published 2017-09-17. Last modified 2026-06-17.