CVE-2024-57966

Description

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

Affected Platforms

Weakness Type

CWE-36

References

• https://github.com/KDE/ark/commit/fe518d81b338941e0bf1c5ce5e75a9ab6de4bb58
• https://github.com/KDE/ark/compare/v24.11.90...v24.12.0
• https://lists.debian.org/debian-lts-announce/2025/02/msg00007.html