← Fixed vulnerabilities
Fixed
Integer overflow in libarchive leading to double free
FreeBSD-SA-25:07.libarchive · CVE-2025-5914
Our decision for FreeSense
FreeBSD corrected this on 2025-06-19, before the FreeBSD source pin of every FreeSense version.
- Advisory: corrected 2025-06-19
- FreeSense 1.0 pin: e004ff15f87e (2026-08-03)
- FreeSense 1.1 pin: a52c50b4b7c2 (2026-10-04)
- FreeSense 1.2 pin: a52c50b4b7c2 (2026-10-04)
Decided by rules, not yet reviewed. The status comes from the advisory's correction date and the build configuration. A maintainer has not looked at whether FreeSense is exposed in practice. How we triage
By FreeSense version
| Version | Status | FreeBSD pin |
|---|---|---|
| FreeSense 1.01.0.7 · frozen, no further fixes | FixedFreeBSD pin of 2026-08-03 | 2026-08-03e004ff15 |
| FreeSense 1.11.1.9 | FixedFreeBSD pin of 2026-10-04 | 2026-10-04a52c50b4 |
| FreeSense 1.21.2.0-DEVELOPMENT | FixedFreeBSD pin of 2026-10-04 | 2026-10-04a52c50b4 |
Workaround
No workaround is available.
What FreeBSD says
An integer overflow in the archive_read_format_rar_seek_data() function may lead to a double free problem.
Impact
Exploiting a double free vulnerability can cause memory corruption. This in turn could enable a threat actor to execute arbitrary code. It might also result in denial of service.
Excerpt from the FreeBSD advisory. Read the original for the full text and the fix.