{"id":"EUVD-2025-33711","revision":"fc5d3f1d43154062b0c1ce6e43b31a30","records":[{"revision":"fc5d3f1d43154062b0c1ce6e43b31a30","observedAt":"2026-11-09T02:10:41.35+00:00","statement":{"source":"euvd","id":"EUVD-2025-33711","aliases":["CVE-2025-11579","GHSA-rwvp-r38j-9rgg"],"title":"github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading\u00A0large RAR\u00A0dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Cr…","description":"github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading\u00A0large RAR\u00A0dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","score":5.3,"severity":null}],"references":["https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-33711","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 10, 2025, 11:15:15 AM","dateUpdated":"Dec 2, 2025, 9:30:03 AM"},"relatedAdvisories":[{"id":"openSUSE-SU-2026:10844-1","title":"jfrog-cli-2.104.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-11579"]},{"id":"openSUSE-SU-2025:15710-1","title":"govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media","vulnerabilityIds":["CVE-2016-11063","CVE-2016-11066","CVE-2016-11067","CVE-2016-11068","CVE-2016-11069","CVE-2016-11070","CVE-2016-11071","CVE-2016-11072","CVE-2016-11073","CVE-2016-11074","CVE-2016-11075","CVE-2016-11076","CVE-2016-11077","CVE-2016-11078","CVE-2016-11079","CVE-2016-11080","CVE-2016-11081","CVE-2016-11082","CVE-2016-11083","CVE-2016-11084","CVE-2017-18872","CVE-2023-32199","CVE-2024-58269","CVE-2025-10545","CVE-2025-10678","CVE-2025-10954","CVE-2025-11374","CVE-2025-11375","CVE-2025-11579","CVE-2025-11621","CVE-2025-12044","CVE-2025-26625","CVE-2025-27093","CVE-2025-41410","CVE-2025-41443","CVE-2025-54286","CVE-2025-54287","CVE-2025-54288","CVE-2025-54289","CVE-2025-54290","CVE-2025-54291","CVE-2025-54293","CVE-2025-54469","CVE-2025-54470","CVE-2025-54471","CVE-2025-54499","CVE-2025-58073","CVE-2025-58075","CVE-2025-58356","CVE-2025-59043","CVE-2025-59048","CVE-2025-59530","CVE-2025-59836","CVE-2025-59937","CVE-2025-61141","CVE-2025-61524","CVE-2025-61581","CVE-2025-61688","CVE-2025-62156","CVE-2025-62157","CVE-2025-62375","CVE-2025-62506","CVE-2025-62513","CVE-2025-62705","CVE-2025-62714","CVE-2025-62725","CVE-2025-62820","CVE-2025-64101","CVE-2025-64102","CVE-2025-64103"]},{"id":"openSUSE-SU-2025:15722-1","title":"hauler-1.3.1-1.1 on GA media","vulnerabilityIds":["CVE-2025-11579","CVE-2025-47911","CVE-2025-58058"]},{"id":"openSUSE-SU-2025:20160-1","title":"Security update for hauler","vulnerabilityIds":["CVE-2024-0406","CVE-2024-45338","CVE-2025-11579","CVE-2025-22872","CVE-2025-46569","CVE-2025-47911","CVE-2025-58058","CVE-2025-58190"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-33711","identifiers":["EUVD-2025-33711","CVE-2025-11579","GHSA-rwvp-r38j-9rgg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}