{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libarchive","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NMZD3KJS3FF4D1SSXM7JB4","modified_at":"2026-09-01T20:05:41.513305620Z","published_at":"2025-02-24T14:15:11.590Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2025-1632","https://security-tracker.debian.org/tracker/CVE-2025-1632"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2025-1632","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2025-1632"}],"summary":"A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. I"}