CVE-2011-1777: Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_...

Security readout for executives and security teams

CVE-2011-1777 is a libarchive flaw in ISO9660 image handling. A crafted disk image could crash software that processes it, and the CVE states arbitrary code execution may be possible. Business risk depends on whether systems or applications process untrusted ISO images using affected libarchive versions. Exposure is most likely where libarchive through 2.8.5 is present and processes user-supplied or externally sourced ISO9660 images. The bundle does not identify specific affected downstream products beyond libarchive and referenced vendor distributions. Prioritize remediation where archive processing touches external content. This is not KEV-backed active exploitation in the supplied evidence, but possible code execution and denial of service make vulnerable parsing services a meaningful operational risk. Mitigation focus: Inventory systems and applications that include libarchive or OS packages built from it.; Apply vendor updates referencing CVE-2011-1777 from Red Hat, Debian, Apple, or applicable suppliers.; If no vendor fix is available, follow current vendor guidance before accepting untrusted ISO images..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.