# CVE-2026-5745: A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically…

Source: https://junglewise.ai/threats/cve-2026-5745-a-flaw-was-found-in-libarchive-a-null-pointer-dereference  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-07  
License: CC BY 4.0 with a link back

CVE-2026-5745 · Severity: medium · CVSS 5.5 · Published 2026-04-07

A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare "d" or "default" tag without subsequent fields), the function fails to perform adequate validation before advancing the pointer. An attacker can exploit this by providing a maliciously crafted archive, causing an application utilizing the libarchive API (such as bsdtar) to crash, resulting in a Denial of Service (DoS).

Technologies: [Libarchive](https://junglewise.ai/threats/technologies/libarchive), [Redhat Enterprise Linux](https://junglewise.ai/threats/technologies/enterprise-linux), [Redhat Hardened Images](https://junglewise.ai/threats/technologies/hardened-images), [Redhat Openshift Container Platform](https://junglewise.ai/threats/technologies/openshift-container-platform). Vendors: [Libarchive](https://junglewise.ai/threats/vendors/libarchive), [Redhat](https://junglewise.ai/threats/vendors/redhat).

## Quick answers

**Is CVE-2026-5745 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-5745 being exploited in the wild.

**How severe is CVE-2026-5745?** Medium severity, with a CVSS score of 5.5, published 7 April 2026.

**Which products and versions are affected?** Libarchive, Redhat Enterprise Linux, Redhat Hardened Images, Redhat Openshift Container Platform. The advisory does not name versions.

**Is there a fix for CVE-2026-5745?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-5745?** Check whether you run Libarchive, Redhat Enterprise Linux, Redhat Hardened Images or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Libarchive
- Redhat Enterprise Linux
- Redhat Hardened Images
- Redhat Openshift Container Platform

## Related threats

- [Windows Libarchive double free vulnerability](https://junglewise.ai/threats/cve-2026-70062-double-free-in-windows-libarchive-allows-an-unauthorized-attacker)
- [Windows Libarchive path traversal vulnerability](https://junglewise.ai/threats/cve-2026-69973-improper-limitation-of-a-pathname-to-a-restricted-directory-path)
- [Libarchive relative path traversal in Windows](https://junglewise.ai/threats/cve-2026-69968-relative-path-traversal-in-windows-libarchive-allows-an)
- [libarchive gzip writer heap buffer overflow in original-filename](https://junglewise.ai/threats/cve-2025-64031-libarchive-gzip-writer-heap-buffer-overflow-in-original-filename)
- [GIMP file-pix plugin stack overflow in PIX image processing](https://junglewise.ai/threats/cve-2026-78475-gimp-file-pix-plugin-stack-overflow-in-pix-image-processing)