libarchive Integer Overflow Vulnerability Leading to Heap Buffer Overflow on 32-bit Systems

An integer overflow vulnerability has been identified in libarchive, specifically in the zisofs block pointer allocation logic on 32-bit systems. This flaw can be exploited by remote attackers who provide specially crafted ISO9660 images, leading to a heap buffer overflow. Such an overflow could potentially allow arbitrary code execution on the affected system.

Impact

Exploitation of this vulnerability can result in a heap buffer overflow, which may be exploited to execute arbitrary code on the affected system.

Remediation

To mitigate this vulnerability, avoid processing untrusted ISO9660 images with applications that use libarchive. Only extract or read content from ISO images obtained from trusted sources.