CVE-2018-25018: RARLAB UnRAR

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.

Affected products

• RARLAB UnRAR: from 5.6.1.7, up to and including 5.7.4; version 6.0.3 only

Published 2021-07-01. Last modified 2026-06-17.